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Foreword 



rd , 



This Technical Specification (TS) has been produced by the 3' Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 



Introduction 

This document defines the Application Test specification. 

The aim of the present document is to ensure interoperability between an UICC and a Terminal independently of the 
respective manufacturer, card issuer or operator. The present document does not define any aspects related to the 
administrative management phase of the UICC. Any internal technical realisation of either the UICC or the Terminal is 
only specified where these are reflected over the interface. 

Application specific details for applications residing on an UICC are specified in the respective application specific 
documents. The logical and physical Characteristics of the UICC Terminal interface is specified in document 
TS 102 221 [5] The Universal Subscriber Identity Module (USIM)-application for 3G telecommunication networks is 
specified in document 3G TS 31.102 [4]. 
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1 Scope 

The present document provides the UICC (Universal IC Card)-Terminal Interface Conformance Test Specification 
between the 3'^'^ Generation Terminal and USIM (Uni 
and the Terminal for 3G telecom network operation: 

the default setting of the USIM; 

the applicability of each test case; 

the test configurations; 

the conformance requirement and reference to the core specifications; 

the test purposes; and 

a brief description of the test procedure and the specific acceptance criteria. 
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3 Definitions, symbols, abbreviations and coding 
3.1 Definitions 

For the purposes of the present document, the following terms and definitions apply. 

Application DF: application DF is the entry point to an application. 

Access conditions: set of security attributes associated with a file. 

Access technology: Radio Access Technology of the Terminal (e.g. UTRAN or GSM) 

Application: application consists of a set of security mechanisms, files, data and protocols (excluding transmission 
protocols). 

Application protocol: set of procedures required by the application. 

Card session: link between the card and the external world starting with the ATR and ending with a subsequent reset or 
a deactivation of the card. 

Current directory: latest MF or DF or ADF selected. 

Current EF: latest EF selected. 

Data Object: information coded as TLV objects, i.e. consisting of a Tag, a Length and a Value part. 

Dedicated File (DF): file containing access conditions and, optionally. Elementary Files (EFs) or other Dedicated Files 
(DFs). 

Directory: general term for MF, DF and ADF. 

Elementary File (EF): file containing access conditions and data and no other files. 

File: directory or an organised set of bytes or records in the UlCC. 

File identifier: 2 bytes which address a file in the UlCC. 

Function: function contains a command and a response pair. 

GSM session: that part of the card session dedicated to the GSM operation. 

ID-1 UlCC: UlCC having the format of an lD-1 card (see ISO/IEC 7816-1 [1]). 

Master File (MF): unique mandatory file containing access conditions and optionally DFs and/or EFs. 

Normal USIM operation: relating to general, PIN related, 3G and or GSM security and subscription related 
procedures. 

Plug-in UlCC: second format of UlCC. 

Record: string of bytes within an EF handled as a single entity. 

Record number: number, which identifies a record within an EF. 

Record pointer: pointer, which addresses one record in an EF. 

Terminal: a device into which a UlCC can be inserted and which is capable of providing access to UMTS services to 
users, either alone or in conjunction with a UlCC. User Equipment: A Terminal with one or several UMTS Subscriber 
Identity Module(s) (USIM). 
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USIM session: USIM session is a selectable application session for a USIM application. 



3.2 Symbols 



For the purposes of the present document, the following symbols apply: 



bx 
Bn 



Bit X of byte (leftmost bit is MSB) 
Byte No. n 



3.3 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 



3G 


3 Generation 


3GPP 


3"" Generation Partnership Project 


ACC 


ACcess Class 


ACL 


APN Control List 


ACM 


Accumulated Call Meter 


ACMmax 


ACM maximal value 


ACT 


ACcess Technology 


ADF 


Application Dedicated File 


AoC 


Advice of Charge 


AoCC 


Advice of Charge Charging 


APN 


Access Point Name 


ATR 


Answer To Reset 


BCD 


Binary Coded Decimal 


BCCH 


Broadcast Control Channel 


BDN 


Barred Dialling Number 


CCI 


Capability / Configuration Identifier 


CCM 


Current Call Meter 


CK 


Cipher key 


DF 


Dedicated File 


EF 


Elementary File 


EMMI 


Electrical Man Machine InterfaceExt nExtension n 


FDN 


Fixed Dialling Number 


FPLMN 


Forbidden PLMN 


GSM 


Global System for Mobile communications 


HPLMN 


Home PLMN 


ICC 


Integrated Circuit Card 


ID 


IDentifier 


lEC 


International Electrotechnical Commission 


IK 


Integrity key 


IMSI 


International Mobile Subscriber Identity 


ISO 


International Organization for Standardization 


KSI 


Key Set Identifier 


LAC 


Location Area Code 


LAI 


Location Area Information 


LSB 


Least Significant Bit 


MCC 


Mobile Country Code 


MF 


Master File 


MMI 


Man Machine Interface 


MNC 


Mobile Network Code 


MSB 


Most Significant Bit 


NPI 


Numbering Plan Identifier 


OFM 


Operational Feature Monitor 


OSI 


Open System Interconnection 


PI 


Parameter 1 


P2 


Parameter 2 


P3 


Parameter 3 


PIN 


Personal Identification Number 
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PLMN Public Land Mobile Network 

PS Packet switched 

RACH Random Access Channel 

RFU Reserved for Future Use 

RPLMN last Registered PLMN 

SS System Simulator (GSM) 

TE Terminal Equipment 

TLV Tag Length Value 

TMSI Temporary Mobile Subscriber Identity 

TON Type Of Number 

UICC Universal ICC 

UE User Equipment 

USS UMTS System Simulator 

USIM Universal Subscriber Identity Module 

UTRAN UMTS Terrestrial Radio Access Network 

VPLMN Visitor PLMN 

3.4 Coding Conventions 

The following coding conventions apply to the present document. 

All lengths are presented in bytes, unless otherwise stated. Each byte B is represented by eight bits b8 to bl, where b8 is 
the most significant bit (MSB) and bl is the least significant bit (LSB). In each representation, the leftmost bit is the 
MSB. 

In the UICC, all bytes specified as RFU shall be set to '00' and all bits specifies as RFU shall be set to '0'. If the GSM 
and/or USIM application exists on a UICC or is built on a generic telecommunications card, then other values may 
apply for the non- GSM or non-USIM applications. The values will be defined in the appropriate specifications for such 
cards and applications. These bytes and bits shall not be interpreted by a Terminal in a GSM or 3G session. 

The coding of Data Objects in the present document is according to ISO/IEC 7816-6 [2]. 



Default Values 



All Test defined in the subsequent clauses applies to Terminal using both type of currently specified UICC (ID-1 UICC 
or Plug-in UICC) in TS 102 221 clause 4 unless otherwise stated. 

The following sequence of tests confirms: 

a) the correct interpretation of data read from the USIM (Universal Subscriber Identification Module) by the 
Terminal; 

b) the correct writing of data to the USIM by the Terminal; 

c) the initiation of appropriate procedures by the Terminal; 

d) High level protocols. 

All tests apply to the USIM application on the UICC. 

A USIM simulator will be required as part of the USS. Alternatively, to perform the logical tests, USIMs programmed 
with specific data may be used. The USIM data is not defined within the initial conditions of the tests unless it differs 
from the default values defined below. 
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4.1 Definition of default values for USIIVI-Terminal interface testing 
(Default UICC) 

A USIM containing the following default values is used for all tests of this present document unless otherwise stated. 

For each data item, the logical default values and the coding within the elementary files (EF) of the USIM follow. 

NOTE 1 : Bx represents byte x of the coding. 

NOTE 2: Unless otherwise defined, the coding values are hexadecimal. 

4.1 .1 Values of the EF's (Default UICC) 



4.1.1.1 EFiMsi(IMSI) 














Logically: 2460813579 














Coding: Bl B2 B3 


B4 


B5 


B6 


B7 


B8 


B9 


Hex 06 21 64 


80 


31 


75 


F9 


FF 


FF 



4.1 .1 .2 EFad (Administrative Data) 

Logically: Normal operation 

OFM to be deactivated by the Terminal 
MNC: 3 digit 



Coding: 


Bl 


B2 


B3 


B4 


Hex 


00 


00 


00 


03 



4.1.1.3 EFloci (Location Information) 



Logically: LAl-MCC: 


246 


















LAl-MNC: 


081 


















LAI-LAC: 


0001 


















TMSl: 


"FF .. FF" 


















Coding: Bl B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


Hex FF FF 


FF 


FF 


42 


06 


18 


00 


01 


FF 


00 



4.1 .1 .4 EpKeys (Ciphering and Integrity Keys) 

Logically: Key Set Identifier KSI: Ox 
Ciphering Keys CK: xx 
Integrity Keys IK: xx 



Coding: 


Bl 


B2 


B3 


B16 


B17 


B18 


Hex 


Ox 


XX 


XX 


XX 


XX 


XX 



B30 B31 B32 



4.1 .1 .5 EpKeysPs (Ciphering and Integrity Keys for Packet Switched domain) 

Logically: Key Set Identifier KSI: Ox 
Ciphering Keys CK: xx 
Integrity Keys IK: xx 



£75/ 



3GPP TS 31.121 version 3.0.0 Release 1 999 16 ETSI TS 1 31 1 21 V3.0.0 (2000-1 2) 



Coding: 


Bl 


B2 


B3 


B16 


B17 


B18 


B30 


B31 


B32 


Hex 


Ox 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 



4.1 .1 .6 EFacc (Access Control Class) 

Logically: One and only one access class from 0-9, e.g. class 7 for which the coding is "00 80". 

4.1.1.7 EFfplmn (Forbidden PLMNs) 

Besides of the 4 mandatory EFpplmn 2 optional EFpplmn are defined according to TS 31.102 subclause 4.2.16 



Logically 


: PLMNl 
PLMN2 
PLMN3 
PLMN4 
PLMN5 
PLMN6 


234 001 (MCC MNC) 

234 002 

234 003 

234 004 

234 005 

234 006 


















Coding: 
Hex 


Bl 

32 

B13 

32 


B2 B3 

04 10 

B14 B15 
04 50 


B4 

32 

B16 

32 


B5 

04 

B17 
04 


B6 

20 

BIS 
60 


B7 

32 


B8 

04 


B9 

30 


BIO 

32 


Bll 

04 


B12 

40 



4.1.1.8 EFusT (USIM Service Table) 

Logically: 

Local Phone Book available 

User controlled PLMN selector available 

Fixed dialling numbers available 

Barred dialling numbers available 

The GSM Access available 

The Group Identifier level 1 and level 2 not available 



Coding: 


Bl 


B2 


B3 


B4 


binary 


xlxxxxll 


xxxx xxxx 


xxxx 1x00 


xxxx xlxx 



The coding of EFust shall conform with the capabilities of the USIM used. 



4.1 .1 .9 EFest (Enable Service Table) 

Logically: 

Fixed Dialling Numbers (FDN) disabled. 
Barred Dialling Numbers (BDN) disabled. 
APN Control list (ACL) disabled 

Coding: Bl 
binary 0000 0000 

The coding of EFpsi shall conform with the capabilities of the USIM, unused Bits are set to '0' . 
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4.1 .1 .1 EFadn (Abbreviated Dialling Number) 

Logically: 
At least 10 records. 
Record 1 to 10: 

Length of alpha identifier: 32 characters; 

Alpha identifier: "ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEF"; 

Length of BCD number: "03"; 

TON and NPI: Telephony and Unknown; 

Dialled number: 123; 

CCL None; 

Extl: None. 



Record 1: 


























Coding: 


Bl 


B2 


B3 


B32 


B33 


B34 


B35 


B36 


B37 


B38 


B39 ... 


B46 


Hex 


41 


42 


43 


46 


03 


81 


21 


F3 


FF 


FF 


FF 


FF 



4.1 .1 .11 EFpLMNwACT (User Controlled PLMN Selector with Access Technology) 

Besides of the 8 mandatory EFplmnwact 4 optional EFplmnwact are defined according to the TS 31.102 subclause 4.2.5. 
The Radio Access Technology identifier for the first two PLMN (l" PLMN and 2"*^ PLMN) are set to both UTRAN and 
GSM, all other PLMN to UTRAN only. 

Logically: V PLMN:244 081 (MCC MNC) 



r'ACT: 


UTRAN 


























2"" PLMN: 


244 081 


























2"" ACT: 


GSM 


























3'" PLMN: 


244 082 


























3'" ACT: 


UTRAN 


























4"^ PLMN: 


244 082 


























4"^ ACT: 


GSM 


























5"^ PLMN: 


244 003 


























5"^ ACT: 


UTRAN 


























6"^ PLMN: 


244 004 


























6* ACT: 


UTRAN 


























7"^ PLMN: 


244 005 


























7*^ ACT: 


UTRAN 


























8* PLMN: 


244 006 


























8* ACT: 


UTRAN 


























9* PLMN: 


244 007 


























9* ACT: 


UTRAN 


























10* PLMN: 


244 008 


























10* ACT: 


UTRAN 


























11* PLMN: 


244 009 


























11* ACT: 


UTRAN 


























12* PLMN: 


244 010 


























12* ACT: 


UTRAN 


























Coding: Bl B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


B13 


B14 


B15 


Hex 42 04 


18 


80 


00 


42 


04 


18 


00 


80 


42 


04 


28 


80 


00 


B16 B17 


B18 


B19 


B20 


B21 


B22 


B23 


B24 


B25 


B26 


B27 


B28 


B29 


B30 


42 04 


28 


00 


80 


42 


04 


30 


80 


00 


42 


04 


40 


80 


00 


B31 B32 


B33 


B34 


B35 


B36 


B37 


B38 


B39 


B40 


B41 


B42 


B43 


B44 


B45 


42 04 


50 


80 


00 


42 


04 


60 


80 


00 


42 


04 


70 


80 


00 


B46 B47 


B48 


B49 


B50 


B51 


B52 


B53 


B54 


B55 


B56 


B57 


B58 


B59 


B60 


42 04 


80 


80 


00 


42 


04 


90 


80 


00 


42 


04 


01 


80 


00 
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4.1 .1 .1 2 EFopLMNwACT (Operator Controlled PLMN Selector with Access Technology) 

Besides of the mandatory EFoplmnwact, an optional EFqplmnwact is defined according to the TS 31.102 subclause 
4.2.53. The Radio Access Technology identifier for the first PLMN is set to both UTRAN and GSM, the other PLMN 
to UTRAN only. 

Logically: l" PLMN:254 001 (MCC MNC) 
r'ACT: UTRAN 





2"'' PLMN: 254 001 


















2"" ACT: GSM 
















Coding: 


Bl B2 B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Hex 


52 04 10 


80 


00 


52 


04 


10 


00 


80 



4.1 .1 .1 3 EFrplmnact (RPLMN Last used Access Technology) 

Logically: No information about the last used ACT available. 



Coding: 
Hex 



Bl 
00 



B2 
00 



4.1.1.14 PIN 

Logically: 2468 



Coding: Bl B2 


B3 


B4 


B5 


B6 


B7 


B8 


Hex 32 34 


36 


38 


FF 


FF 


FF 


FF 


4.1.1.15 PIN2 














Logically: 3579 














Coding: Bl B2 


B3 


B4 


B5 


B6 


B7 


B8 


Hex 33 35 


37 


39 


FF 


FF 


FF 


FF 


4.1.1.16 Unblock PIN 












Logically: 13243546 














Coding: Bl B2 


B3 


B4 


B5 


B6 


B7 


B8 


Hex 31 33 


32 


34 


33 


35 


34 


36 



4.1.1.17 Unblock PIN2 

Logically: 08978675 



Coding: 
Hex 



Bl 
30 



B2 
38 



B3 
39 



B4 

37 



B5 
38 



B6 
36 



B7 

37 



B8 

35 
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4.1.1.18 Other Values of the USIM 

All other values of EFs provided by the USIM shall be set to the default values defined in the Annex E of TS 31.102. 
Some EFs (like the GSM Access files) may necessary for some tests and apply only to those test cases. 



4.2 Definition of FDN UICC 

The FDN test cases require a different configuration than the one described in subclause 4.1. For that purpose a default 
FDN UICC is defined. In general the values of the FDN UICC are identical to the default UICC, with the following 
exceptions: 

4.2.1 Values of the EPs (FDN UICC) 
4.2.1 .1 EFusT (USIM Service Table) 

Logically: 

Local Phone Book available 

User controlled PLMN selector available 

Fixed dialling numbers available 

Barred dialling numbers available 

The GSM Access available 

The Group Identifier level 1 and level 2 not available. 

Coding: Bl B2 B3 B4 

binary xxlxxxll xxxx xxxx xxxx 1x00 xxxxxlxx 

The coding of EFust shall conform with the capabilities of the USIM used. 



4.2.1 .2 EFest (Enable Service Table) 

Logically: 

Fixed Dialling Numbers enabled. 
Barred Dialling Numbers disabled. 
APN Control list (ACL) disabled. 

Coding: Bl 
binary 0000 0001 

The coding of EFest shall conform with the capabilities of the USIM, unused Bits are set to '0' 

4.2.1.3 EFfdn (Fixed Dialling Numbers) 

Logically: 
Record 1: 

Length of alpha identifier: 6 characters; 

Alpha identifier: "FDNlll"; 

Length of BCD number: "06" ; 

TON and NPI: Telephony and International; 

Dialled number: + 1 357924680; 

CCI: None; 

Ext2: None. 
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Coding for record 1 : 
























Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


B13 


Hex 46 


44 


4E 


31 


31 


31 


06 


91 


31 


75 


29 


64 


08 


B14 


B15 


B16 


B17 


B18 


B19 


B20 














FF 


FF 


FF 


FF 


FF 


FF 


FF 














Record 2: 


























Length of 


alpha identifier: 


6 characters; 


















Alpha identifier: 




"FDN222 


"• 


















Length of BCD number: 


"04"; 




















TON and NPI: 




Telephony and Unknown; 
















Dialled number: 




+24680; 




















CCI: 






None; 




















Ext2: 






None. 




















Coding for record 2: 
























Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


B13 


Hex 46 


44 


4E 


32 


32 


32 


04 


81 


42 


86 


FO 


FF 


FF 


B14 


B15 


B16 


B17 


B18 


B19 


B20 














FF 


FF 


FF 


FF 


FF 


FF 


FF 














Record 3: 


























Length of 


alpha identifier: 


6 characters; 


















Alpha identifier: 




"FDN333 


"• 


















Length of BCD number: 


"OB"; 




















TON and NPI: 




Telephony and International; 














Dialled number: 




+12345678901234567890 
















CCI: 






None; 




















Ext2: 






None. 




















Coding for record 3: 
























Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


B13 


Hex 46 


44 


4E 


33 


33 


33 


OB 


91 


21 


43 


65 


87 


09 


B14 


B15 


B16 


B17 


B18 


B19 


B20 














21 


43 


65 


87 


09 


FF 


FF 















4.2.1 .4 EFecc (Emergency Call Codes) 

Logically: 

Emergency call code: " 122"; 

Emergency call code alpha identifier: "TEST"; 

Emergency call type indicator: RFU. 



Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


Hex 


21 


IF 


FF 


54 


45 


53 


54 


00 


00 



4.2.1 .5 Other Values of the USIM 

All other values of EFs provided by the USIM shall be set to the default values defined in the Annex E of TS 31.102. 
Some EFs (like the GSM Access files) may necessary for some tests and apply only to those test cases. 
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4.3 Definition of BDN UICC 

The BDN test cases require a different configuration than the one described in subclause 4.1. For that purpose a default 
BDN UICC is defined. In general the values of the BDN UICC are identical to the default UICC, with the following 
exceptions: 

4.3.1 Values of the EF's (BDN UICC) 
4.3.1 .1 EFusT (USIM Service Table) 

Logically: 

Local Phone Book available 

User controlled PLMN selector available 

Fixed dialling numbers available 

Barred dialling numbers available 

The GSM Access available 

The Group Identifier level 1 and level 2 not available. 



Coding: 


Bl 


B2 


B3 


B4 


binary 


xxlxxxll 


xxxx xxxx 


xxxx 1x00 


xxxx xlxx 



The coding of EFust shall conform with the capabilities of the USIM used. 

4.3.1 .2 EFest (Enable Service Table) 

Logically: 

Fixed Dialling Numbers disabled. 
Barred Dialling Numbers enabled. 
APN Control list (ACL) disabled. 



Coding: 
binary 



Bl 

0000 0010 



The coding of EFest shall conform with the capabilities of the USIM, unused Bits are set to '0' 

4.3.1.3 EFbdn (Barred Dialling Numbers) 



Logically: 
























Record 1: 
























Length of alpha identifier: 


6 characters; 


















Alpha identifier: 




"BDNlll 


"■ 


















Length of BCD number: 


"06"; 




















TON and NPI: 




Telephony and International; 














Dialled number: 




+1357924680; 


















CCI: 




None; 




















Ext2: 




None. 




















Coding for record 1 : 
























Bl B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


B13 


Hex 42 44 


4E 


31 


31 


31 


06 


91 


31 


75 


29 


64 


08 


B14 B15 


B16 


B17 


B18 


B19 


B20 














FF FF 


FF 


FF 


FF 


FF 


FF 
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Record 2: 
























Length of alpha identifier: 


6 characters; 


















Alpha identifier: 




"BDN222 


"• 


















Length of BCD number: 


"03"; 




















TON and NPI: 




Telephony and Unknown; 
















Dialled number: 




122; 




















CCI: 




None; 




















Ext2: 




None. 




















Coding for record 2: 
























Bl B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


B13 


Hex 42 44 


4E 


32 


32 


32 


04 


81 


21 


F3 


FF 


FF 


FF 


B14 B15 


B16 


B17 


B18 


B19 


B20 














FF FF 


FF 


FF 


FF 


FF 


FF 














Record 3: 
























Length of alpha identifier: 


6 characters; 


















Alpha identifier: 




"BDN333 


". 


















Length of BCD number: 


"03"; 




















TON and NPI: 




Telephony and Unknown; 
















Dialled number: 




112; 




















CCI: 




None; 




















Ext2: 




None. 




















Coding for record 3: 
























Bl B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


B13 


Hex 42 44 


4E 


33 


33 


33 


03 


81 


11 


F2 


FF 


FF 


FF 


B14 B15 


B16 


B17 


B18 


B19 


B20 














FF FF 


FF 


FF 


FF 


FF 


FF 















4.3.1 .4 EFecc (Emergency Call Codes) 

Logically: 

Emergency call code: " 122"; 

Emergency call code alpha identifier: "TEST"; 

Emergency call type indicator: RFU. 



Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


Hex 


21 


IF 


FF 


54 


45 


53 


54 


00 


00 



4.3.1 .5 Other Values of the USIM 

All other values of EFs provided by the USIM shall be set to the default values defined in the Annex E of TS 31.102. 
Some EFs (Uke the GSM Access files) may necessary for some tests and apply only to those test cases. 
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5 Subscription related tests 

5.1 IIVISI/TMSI handling 

5.1 .1 UE identification by siiort IMSI 

5.1 .1 .1 Definition and applicability 

The IMSI is used for unique identification of the UE by UTRAN. The IMSI is stored in the USIM and read during the 
UICC-Terminal initialisation procedure. 

This test applies to Terminals accessing UTRAN. 

5.1.1.2 Conformance requirement 

On the receipt of an IMMEDIATE ASSIGNTMENT message the UE shall send PAGING RESPONSE containing the 
IMSI of the USIM. 

Reference: 

TS 31.102, subclause 5.1.1 and 5.2.2; 
TS 24.008, subclause 10.5.1.4; 
TS 102 221, subclause 14.1.1. 

5.1.1.3 Test purpose 

1) To verify that the Terminal uses the IMSI of the USIM. 

2) To verify that the Terminal can handle an IMSI of less than the maximum length. 

3) To verify that the READ EFimsi command is performed correctly by the terminal 

5.1.1.4 Method of test 

5.1 .1 .4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

The default UICC is installed into the Terminal and the UE is powered on. 

5.1.1.4.2 Procedure 

a) The USS sends PAGING REQUEST to the UE using the IMSI stored in the USIM. 

b) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a PAGING RESPONSE from the UE, the USS sends CHANNEL RELEASE to the UE. 

5.1 .1 .5 Acceptance criteria 

After step b) the UE shall send PAGING RESPONSE to the USS containing the IMSI stored in the USIM. 
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5.1 .2 UE identification by sinort IMSI using a 2 digit MNC 

5.1 .2.1 Definition and applicability 

In some networks the IMSI identifying the UTRAN can be consistence of a 2 digit MNC. The IMSI is stored in the 
USIM and read during the UICC-Terminal initialisation procedure. 

This test applies to Terminals accessing UTRAN. 

5.1.2.2 Conformance requirement 

On the receipt of an IMMEDIATE ASSIGNTMENT message the UE shall send PAGING RESPONSE containing the 
IMSI of the USIM. 

Reference: 

TS 31. 102, subclause 4.2.18; 
TS 24.008, subclause 10.5.1.4. 

5.1.2.3 Test purpose 

1) To verify that the Terminal can handle an IMSI consistence of a 2 digit MNC. 

5.1.2.4 Method of test 
5.1.2.4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters: 



Attach/detach: 

LAI (MCC/MNC/LAC): 

Access control: 



disabled 

246/81/0001 

unrestricted. 



The default UICC is used with the following exception: 
EFmsi (IMSI) 
Logically: 246813579 



Coding: Bl B2 B3 B4 B5 
Hex 05 29 64 18 53 


B6 

97 


B7 
FF 


B8 
FF 


B9 
FF 


EFad (Administrative Data) 










Logically: Normal operation 

OEM to be deactivated by the Terminal 
MNC: 2 digit 










Coding: Bl B2 B3 B4 
Hex 00 00 00 02 











The UICC is installed into the Terminal and the UE is powered on. 

5.1.2.4.2 Procedure 

a) The USS sends PAGING REQUEST to the UE using the IMSI stored in the USIM. 

b) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 
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c) After receipt of a PAGING RESPONSE from the UE, the USS sends CHANNEL RELEASE to the UE. 

5.1 .2.5 Acceptance criteria 

After step b) the UE shall send PAGING RESPONSE to the USS containing the IMSI stored in the USIM. 

5.1 .3 UE identification by "siiort" TMSI 

5.1 .3.1 Definition and applicability 

The TMSI is temporarily used for identification of the UE by UTRAN. It will have been previously assigned by the 
network. The TMSI is stored in the USIM by the Terminal and read during the USIM-Terminal initialisation procedure. 

Note According to TS 23.003, clause 2.4, a TMSI always consists of 8 digits (4 bytes). With this tests the 

handling of a TMSI with leasing zeros will be tested. The term "short" TMSI is used in order to 
distinguish between the tests as defined in subclause 5.1.3 and 5.1.4. 

This test applies to Terminals accessing UTRAN. 

5.1.3.2 Conformance requirement 

On the receipt of an IMMEDIATE ASSIGNMENT message the UE shall send PAGING RESPONSE containing the 
TMSI stored in the USIM. 

Reference: 

TS 31.102, subclause 5.1.1 and 5.2.2; 
TS 24.008, subclause 10.5.1.4. 

5.1.3.3 Test purpose 

1) To verify that the Terminal uses the TMSI stored in the USIM. 

2) To verify that the Terminal can handle a TMSI of less than maximum length. 

5.1.3.4 Method of test 
5.1.3.4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

The default UICC is used with the following exception: 
EFloci (Location Information) 



Logically 


: LAI-MCC: 
LAI-MNC: 
LAI-LAC: 
TMSI: 


246 
081 
0001 

"2143" 


















Coding: 


Bl B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


Hex 


00 00 


21 


43 


42 


06 


18 


00 


01 


FF 


00 



The UICC is installed into the Terminal and the UE is powered on. 
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5.1.3.4.2 Procedure 

a) The USS sends PAGING REQUEST to the UE using the TMSI stored in the USIM. 

b) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a PAGING RESPONSE from the UE, the USS sends CHANNEL RELEASE to the UE. 

5.1 .3.5 Acceptance criteria 

After step b) the UE shall send PAGING RESPONSE to the USS containing the TMSI stored in the USIM. 

5.1 .4 UE identification by "long" TMSI 

5.1 .4.1 Definition and applicability 

The TMSI is temporarily used for identification of the UE by UTRAN. It will have been previously assigned by the 
network. The TMSI is stored in the USIM by the Terminal and read during the USIM-Terminal initialisation procedure. 

Note According to TS 23.003, clause 2.4, a TMSI always consists of 8 digits (4 bytes). With this tests the handling of 
a new assigned TMSI will be tested. The term "long" TMSI is used in order to distinguish between the tests as defined 
in subclause 5.1.3 and 5. 1.4. This test applies to Terminals accessing UTRAN. 

5.1.4.2 Conformance requirement 

On the receipt of an IMMEDIATE ASSIGNMENT message the UE shall send PAGING RESPONSE containing the 
correct TMSI stored in the USIM. 

Reference: 

TS 31.102, subclause 5.1.1 and 5.2.2; 
TS 24.008, subclause 10.5.1.4. 

5.1.4.3 Test purpose 

1) To verify that the Terminal uses the TMSI stored in the USIM. 

2) To verify that the Terminal can handle a TMSI of maximum length. 

3) To verify that the Terminal does not respond to page requests containing a previous TMSI. 

5.1.4.4 Method of test 
5.1.4.4.1 Initial conditions 

Prior to this test, the Terminal shall have been operated with a USIM containing TMSI "2143". This may be achieved 
by executing the previous test (5.1.3) prior to this test. Only under this condition will test purpose 3) be verified. 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 
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The default UICC is used with the following exception: 
EFloci (Location Information) 



Logically 


: LAI-MCC: 
LAI-MNC 
LAI-LAC: 
TMSI: 


246 
: 081 

0001 
"21430000" 


















Coding: 


B1 


82 B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


B11 


Hex 


21 


43 00 


00 


42 


06 


18 


GO 


01 


FF 


00 



The UICC is installed into the Terminal and the UE is powered on. 

5.1.4.4.2 Procedure 

a) The USS sends PAGING REQUEST to the UE using the TMSI "2143". 

b) The USS sends PAGING REQUEST to the UE using the TMSI stored in the USIM. 

c) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

d) After receipt of a PAGING RESPONSE from the UE, the USS sends CHANNEL RELEASE to the UE. 

5.1 .4.5 Acceptance criteria 

1) After step a) the UE shall not respond to the PAGING REQUEST. 

2) After step c) the UE shall send PAGING RESPONSE to the USS containing the TMSI stored in the USIM. 

5.1 .5 UE identification by long IMSI, TMSI updating and key set identifier 
assignment 

5.1 .5.1 Definition and applicability 

The IMSI and TMSI are used for identification of the UE by UTRAN. They are read from the USIM during the USIM- 
Terminal initialisation procedure. Within the authentication procedure the network sends a key set identifier to the UE. 
In addition the network may allocate a new TMSI to the UE. Key set identifier and TMSI are stored in the USIM after 
call termination and/or at a 3G session termination. 

This test applies to Terminals accessing UTRAN. 

5.1.5.2 Conformance requirement 

1) On the receipt of an IMMEDIATE ASSIGNMENT message, the UE shall send PAGING RESPONSE 
containing the correct IMSI stored in the USIM. 

Reference: 

TS 31.102, subclause 5.1.1 and 5.2.2; 
TS 24.008, subclause 10.5.1.4. 

2) After call termination the USIM shall contain the key set identifier and TMSI received by the UE during the 
authentication and TMSI reallocation procedures. 

Reference: 

TS31.102, sections 5.1.2, 5.2.5 and 5.2.6; 
TS 21.111 subclause 10.1. 
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3) After call termination the Terminal shall have updated EFLOCI. 
Reference: 

TS 102 221, subclause 14.1.2. 

5.1.5.3 Test purpose 

1) To verify that the Terminal uses the IMSI stored in the USIM. 

2) To verify that the Terminal does not respond to page requests containing a previous IMSI. 

3) To verify that the Terminal can handle an IMSI of maximum length. 

4) To verify that the Terminal correctly updates the key set identifier at call termination. 

5) To verify that the Terminal correctly updates the TMSI at call termination. 

6) To verify that the UPDATE EFloci command is performed correctly by the terminal 

5.1.5.4 Method of test 
5.1.5.4.1 Initial conditions 

Prior to this test, the Terminal shall have been operated with a USIM containing IMSI "2460813579". This may be 
achieved by executing the previous test (5.1.4) prior to this test. Only under this condition will test purpose 2) be 
verified. 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

The default UICC is used with the following exception: 

EFiMsi (IMSI) 

Logically: 246081111111111 



Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


Hex 


08 


29 


64 


80 


11 


11 


11 


11 


11 



The UICC is installed into the Terminal and the UE is powered on. 

5.1.5.4.2 Procedure 

a) The USS sends PAGING REQUEST to the UE using the IMSI "2460813579". 

b) The USS sends PAGING REQUEST to the UE using the IMSI stored in the USIM. 

c) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

d) After receipt of a PAGING RESPONSE from the UE, the USS sends AUTHENTICATION REQUEST to the 
UE containing Key Set Identifier KSI set to binary 010. 

e) After receipt of AUTHENTICATION RESPONSE from the UE, the USS sends TMSI REALLOCATION to the 
UE containing TMSI "32547698". 

f) Within 5 seconds after receipt of TMSI REALLOCATION COMPLETE from the UE, the USS sends 
CHANNEL RELEASE to the UE. 
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g) To allow examination of the values in the USIM after call termination the UE shall not be soft powered down. If 
the test is performed with a USIM simulator, the simulation is stopped. If the test is performed with a USIM, the 
UICC is removed without soft powering down the UE. If this is not possible, the power supply of the Terminal is 
removed and then the UICC removed. 

5.1 .5.5 Acceptance criteria 

1) After step a) the UE shall not respond to the PAGING REQUEST. 

2) After step c) the UE shall send PAGING RESPONSE to the USS containing the IMSI stored in the USIM. 

3) After step e) the UE shall send TMSI REALLOCATION COMPLETE to the USS. 

4) After step g) the USIM shall contain the following values: 
EFloci (Location Information) 



Logically: LAI-MCC: 


: 246 


















LAI-MNC 


: 081 


















TMSI: 


"32547698" 


















Coding: BI 


B2 B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


Hex 32 


54 76 


98 


42 


06 


18 


XX 


XX 


XX 


00 



EpKey (Ciphering and Integrity Key) 

Logically: Key Set Identifier KSI: 02 

Ciphering Keys CK: xx (result of the authentication algorithm) 
Integrity Keys IK: xx (result of the authentication algorithm) 



Coding: 


Bl 


B2 


B3 


B16 


B17 


B18 


B30 


B31 


B32 


Hex 


02 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 



5.2 Access Control handling 

5.2.1 Access Control information handling 

5.2.1 .1 Definition and applicability 

Access Control allows restriction of call access attempts. All User Equipment are assigned to one out often randomly 
allocated classes, and optionally (for priority uses) also to one or more special categories. 

An Access Class of the special Categories is only valid in the HPLMN or HPLMN country. Otherwise, the randomly 
allocated class is used. 

The classes are programmed on the USIM. The network controls which classes at any time may be barred. 

In addition, there is a separate mechanism for control of network access for emergency call attempts. 

This test applies to Terminals accessing UTRAN. 

5.2.1.2 Conformance requirement 

1 . The Terminal shall read the access control value as part of the USIM-Terminal initialisation procedure, and 
subsequently adopt this value. 

Reference: 
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TS 31.102, subclause 5.1.1. 

2. If the UE is a member of at least one access class which corresponds to the permitted classes as signalled over 
the air interface, and the access class is applicable in the serving network, the UE may make call attempts. 
Otherwise call access attempts are not allowed. 

3. If access class 10 is barred, then the UEs of classes 0-9 and the Terminals without UICCs shall not make 
emergency call attempts. 

4. UE of classes 1 1 - 15 are not allowed to make emergency call attempts if access class 10 and the relevant access 
class(es) between 11 and 15 are barred. Otherwise, emergency call attempts are allowed irrespective of the 
conditions of access class 10. 

All options are shown in figure 5-1 and are referenced to the tests. 

Reference: 

TS 22.011, subclause 4.3 and 4.4. 

5.2.1.3 Test purpose 

1) To verify that the Terminal reads the access control value as part of the USIM-Terminal initialisation procedure, 
and subsequently adopts this value. 

2) To verify that the UE controls its network access in accordance with its access control class and the conditions 
imposed by the serving network. 

The tests verify Terminal performance for the following: 

Tests (a) and (b) No UlCC in Terminal. 

Tests (c) to (e) UE with access class to 9. 

Test (f) UE with access class 1 1 and 15 not in HPLMN, and 

UE with access class 12,13 and 14 not in HPLMN country. 
Test (g) and (h) UE with access class 1 1 and 15 in HPLMN, and 

UE with access class 12,13 and 14 in HPLMN country. 

Each of the above are tested against all relevant combinations of access control and emergency call bits signalled by the 
network, as shown in table 5-1. 

5.2.1.4 Method of test 

5.2.1.4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): see table 5-1 

Access control: see table 5-1 

RACH: see table 5-1 

The default UICC is installed in the Terminal containing IMSI and access control values as given in table 5-1 and the 
UE is powered on. 

NOTE: Depending on the initial value of the EFloci^ the UE may perform a location update. This shall be 
accepted by the USS. 

5.2.1.4.2 Coding details 

USIM IMSI EFiMsi: Data Field "6F 07" 
Logically: IMSI: "2460813579" 
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Coding: 


Bl 


B2 B3 


B4 


B5 


B6 


B7 


B8 


B9 


Hex 


06 


21 64 


80 


31 


75 


F9 


FF 


FF 


Logically: 


IMSI: 


"24608135x9" 














Coding: 


Bl 


B2 B3 


B4 


B5 


B6 


B7 


B8 


B9 


Hex 


06 


21 64 


80 


31 


x5 


F9 


FF 


FF 



Access Control class EFacc: Data field "6F 78" 

Reference: 

See TS 31.102 [4]. 
NETWORK (USS) 
RACH: As defined in GSM 4.18 subclause 10.5.2.29. 

Note: GSM 4. 18 also apply for the Radio Resource management for UMTS, (see TS 24.008, subclause 10.5.2) 

octet 1 01111000 

octet 2 0000 1000 
octet 3 } 

octet 4} as table 5-1 

5.2.1.4.3 Procedure 

a) Using the MMl or EMMI a normal call set-up is attempted. 

b) Using the MMl or EMMI an emergency call set-up is attempted. 

c) The test is repeated for each set of values in table 5-1 . 

5.2.1 .5 Acceptance criteria 

After steps a) and b) the UE shall access the network, or shall make no access attempt, in accordance with table 5-1. 

NOTE: For conformance testing, to limit testing, in tests (c), (d) and (e) it is only necessary that one of the access 
classes is tested. This access class may randomly chosen. 
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Table 5-1 





USIM 






Network 






Test 
Results 




IMS! 




RACH 


Informative: Cell 


BCCH/ 


Normal 


Emergency 










Barred for: 


LAI 


Call 


Call 






Access 


Octet 3 


Emergency Call 


MCC 










Class 


Octet 4 


Normal Call 


MNC 






Test (a) 


NoUICCin 


N/A 


0000 0100 


Yes 


234 


No 


No 




Terminal 




0000 0000 


No 


001 






Test (b) 


No UICC in 


N/A 


0000 0000 


No 


234 


No 


Yes 




Terminal 




0000 0000 


No 


001 






Test (c) 


"2460813579" 





0000 0100 
0000 0001 


Yes 

No, except for ACC 


246 
081 


No 


No 




"2460813579" 


1 


0000 0100 
0000 0010 


Yes 

No, except for ACC 


246 
081 


No 


No 




"2460813579" 


2 


0000 0100 
0000 0100 


Yes 

No, except for ACC 


246 
081 


No 


No 




"2460813579" 


3 


0000 0100 
0000 1000 


Yes 

No, except for ACC 


246 
081 


No 


No 




"2460813579" 


4 


0000 0100 

0001 0000 


Yes 

No, except for ACC 


246 
081 


No 


No 




"2460813579" 


5 


0000 0100 
0010 0000 


Yes 

No, except for ACC 


246 
081 


No 


No 




"2460813579" 


6 


0000 0100 
0100 0000 


Yes 

No, except for ACC 


246 
081 


No 


No 




"2460813579" 


7 


0000 0100 
1000 0000 


Yes 

No, except for ACC 


246 
081 


No 


No 




"2460813579" 


8 


0000 0101 
0000 0000 


Yes 

No, except for ACC 


246 
081 


No 


No 




"2460813579" 


9 


0000 0110 
0000 0000 


Yes 

No, except for ACC 


246 
081 


No 


No 
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Table 5-1 (continued) 



USIM 
IMSI 


RACH 


Network 

Informative: 
Cell Barred for: 


BCCH/ 
LAI 


Normal 
Call 


Test 

Results 

Emergency 

Call 


Access 
Class 


Octet 3 
Octet 4 


Emergency Call 
Normal Call 


MCC 
MNC 




Test (d) "246081 3579" 





0000 0000 
0000 0001 


No 

None, except for ACC 


246 
081 


No 


Yes 


"2460813579" 


1 


0000 0000 
0000 0010 


No 

None, except for ACC 


246 
081 


No 


Yes 


"2460813579" 


2 


0000 0000 
0000 0100 


No 

None, except for ACC 


246 
081 


No 


Yes 


"2460813579" 


3 


0000 0000 
0000 1000 


No 

None, except for ACC 


246 
081 


No 


Yes 


"2460813579" 


4 


0000 0000 

0001 0000 


No 

None, except for ACC 


246 
081 


No 


Yes 


"2460813579" 


5 


0000 0000 
0010 0000 


No 

None, except for ACC 


246 
081 


No 


Yes 


"246081 3579" 


6 


0000 0000 
0100 0000 


No 

None, except for ACC 


246 
081 


No 


Yes 


"246081 3579" 


7 


0000 0000 
1000 0000 


No 

None, except for ACC 


246 
081 


No 


Yes 


"2460813579" 


8 


0000 0001 
0000 0000 


No 

None, except for ACC 


246 
081 


No 


Yes 


"2460813579" 


9 


0000 0010 
0000 0000 


No 

None, except for ACC 


246 
081 


No 


Yes 
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Table 5-1 (continued) 



USIM 
IMSI 


RACH 


Network 

Informative: 
Cell Barred for: 


BCCH/ 
LAI 


Normal 
Call 


Test 

Results 

Emergency 

Call 


Access 
Class 


Octet 3 
Octet 4 


Emergency Call 
Normal Call 


MCC 
MNC 




Test(e) "2460813579" 





1111 1011 
1111 1110 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 


"2460813579" 


1 


1111 1011 
1111 1101 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 


"2460813579" 


2 


1111 1011 
1111 1011 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 


"2460813579" 


3 


1111 1011 
1111 0111 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 


"246081 3579" 


4 


1111 1011 
11101111 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 


"2460813579" 


5 


1101 1011 
1101 1111 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 


"2460813579" 


6 


1111 1011 
1011 1111 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 


"2406813579" 


7 


1111 1011 
0111 1111 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 


"2460813579" 


8 


1111 1010 
1111 1111 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 


"2460813579" 


9 


1111 1001 
1111 1111 


No 

All, except ACC on 

USIM 


246 
081 


Yes 


Yes 
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Table 5-1 (continued) 



USIM 
IMSI 


RACH 


Network 

Informative: 
Cell Barred for: 


BCCH/ 
LAI 


Normal 
Call 


Test 

Results 

Emergency 

Call 


Access 
Class 


Octet 3 
Octet 4 


Emergency Call 
Normal Call 


MCC 
MNC 




Test (f) "246081 35x9" 


11 &x 


0000 01 1 1 
1111 1111 


Yes 

All, except ACC 

greater then 1 1 


246 
082 


No 


No 




11 &x 


0000 001 1 
1111 1111 


No 

All, except ACC 

greater then 1 1 


246 
082 


No 


Yes 


" 


11 &x 


0000 0000 
0000 0000 


No 
None 


246 
082 


Yes 


Yes 


"24608135x9" 


12&X 


0000 01 1 1 

1111 1111 


Yes 

All, except ACC 

greater then 1 1 


244 
001 


No 


No 




12&X 


0000 001 1 

1111 1111 


No 

All, except ACC 

greater then 1 1 


244 
001 


No 


Yes 




12&X 


0000 0000 
0000 0000 


No 
None 


244 
001 


Yes 


Yes 


"24608135x9" 


13&X 


0000 01 1 1 

1111 1111 


Yes 

All, except ACC 

greater then 1 1 


244 
001 


No 


No 




13&X 


0000 001 1 

1111 1111 


No 

All, except ACC 

greater then 1 1 


244 
001 


No 


Yes 


" 


13&X 


0000 0000 
0000 0000 


No 
None 


244 
001 


Yes 


Yes 


"24608135x9" 


14&X 


0000 01 1 1 

1111 1111 


Yes 

All, except ACC 

greater then 1 1 


244 
001 


No 


No 




14&X 


0000 001 1 

1111 1111 


No 

All, except ACC 

greater then 1 1 


244 
001 


No 


Yes 


■ 


14&X 


0000 0000 
0000 0000 


No 
None 


244 
001 


Yes 


Yes 


"24608135x9" 


15&X 


0000 01 1 1 

1111 1111 


Yes 

All, except ACC 

greater then 1 1 


246 
082 


No 


No 




15&X 


0000 001 1 

1111 1111 


No 

All, except ACC 

greater then 1 1 


246 
082 


No 


Yes 


Set "x" to an 
arbitrary value in 
the range to 9 


15&X 


0000 0000 
0000 0000 


No 
None 


246 
082 


Yes 


Yes 
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Table 5-1 (continued) 



USIM 
IMSI 


RACH 


Network 

Informative: 
Cell Barred for: 


BCCH/ 
LAI 


Normal 
Call 


Test 

Results 

Emergency 

Call 


Access 
Class 


Octet 3 
Octet 4 


Emergency Call 
Normal Call 


MCC 
MNC 




Test(g) "2460813579" 


11 &x 


0000 1111 
1111 1111 


Yes 

All normal ACC and 

ACC on USIM 


246 
081 


No 


No 




11 &x 


0000 1011 
1111 1111 


No 

All normal ACC and 

ACC on USIM 


246 
081 


No 


Yes 


"2460813579" 


12&X 


0001 0111 
1111 1111 


Yes 

All normal ACC and 

ACC on USIM 


246 
082 


No 


No 




12&X 


0001 0011 
1111 1111 


No 

All normal ACC and 

ACC on USIM 


246 
082 


No 


Yes 


"2460813579" 


13&X 


0010 0111 
1111 1111 


Yes 

All normal ACC and 

ACC on USIM 


246 
082 


No 


No 




13&X 


0010 0011 
1111 1111 


No 

All normal ACC and 

ACC on USIM 


246 
082 


No 


Yes 


"2460813579" 


14&X 


0100 0111 

1111 1111 


Yes 

All normal ACC and 

ACC on USIM 


246 
082 


No 


No 




14&X 


0100 0011 

1111 1111 


No 

All normal ACC and 

ACC on USIM 


246 
082 


No 


Yes 


"2460813579" 


15&X 


1000 0111 

1111 1111 


Yes 

All normal ACC and 

ACC on USIM 


246 
081 


No 


No 


Set "x" to an 
arbitrary value in 
the range to 9 


15&X 


1000 0011 

1111 1111 


No 

All normal ACC and 

ACC on USIM 


246 
081 


No 


Yes 
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Table 5-1 (continued) 



USIM 
IMSI 



RACH 



Network 

Informative: 
Cell Barred for: 



BCCH/ 
LAI 



Test 
Results 
Normal Emergency 
Call Call 



Access 
Class 



Octet 3 
Octet 4 



Emergency Call 
Normal Call 



MCC 
MNC 



Test(h) "2460813579" 



"2460813579" 



"2460813579" 



"2460813579" 



"2460813579" 



Set "x" to an 
arbitrary value in 
the range to 9 



11 &x 



11 &x 



12&X 



12&X 



13&X 



13&X 



14&X 



14&X 



15&X 



15&X 



111 001 
111 111 



111 Oil 
111 111 



110101 
111 111 



110111 
111 111 



101 101 
111 111 



101 101 
111 111 



Oil 111 
111 111 



Oil 101 
111 111 



0111 101 
111 111 



0111 111 
111 111 



No 246 

All, except "special" 081 
ACC on USIM 

Yes 246 

All, except "special" 081 
ACConUSIIVI 

No 246 

All, except "special" 082 
ACC on USIM 

Yes 246 

All, except "special" 082 
ACC on USIM 

No 246 

All, except "special" 082 
ACC on USIM 

Yes 246 

All, except "special" 082 
ACC on USIM 

No 246 

All, except "special" 082 
ACC on USIM 

Yes 246 

All, except "special" 082 
ACC on USIM 

No 246 

All, except "special" 081 
ACC on USIM 

Yes 246 

All, except "special" 081 
ACC on USIM 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



Yes 



£75/ 



3GPP TS 31.121 version 3.0.0 Release 1999 



38 



ETSI TS 131 121 V3.0.0 (2000-12) 



ECs only. 
Test (b) applies 




All Calls, 
Test (e) 
applies 



Normal Calls allowed, 
ECs NOT allowed 
Abnormal Case, No Test 



All Calls, 
Test (h) 
applies 



'1' 

No Calls, 
Test (g) 
applies 



'1' 

All Calls, 
Test (h) 
applies 



*): UE adopts Access Class 0-9, based on IMSI, See TS 22.0 11 

Access Class in USIM, See TS 31.102 EF ACC, "6F 78" 

ECs: Emergency Calls 

EC Bit: Bit 3 of Octet3 of RACK Control Parameters, See GSM 04.18 Section 10.5.2.29 

AC Bit: See Bytes 3 & 4 of the RACH Control Parameters 

HPLMN Country means that the MCC of the VPLMN is the same as the MCC of the HPLMN 



Figure 5-1 : Access control information 
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6 Security related Tests 

6.1 PIN handling 
6.1.1 Entry of PIN 

6.1 .1 .1 Definition and applicability 

The PIN is a number used to authenticate the user to the UICC for security. Entry of the correct PIN allows PIN- 
protected data to be accessed over the UICC-Terminal interface. 

This test applies to all 3G Terminals. 

6.1.1.2 Conformance requirement 

Following insertion of the UICC and switching on the UE, the Terminal shall check the state of the PIN. If the PIN is 
enabled, the Terminal asks the user for PIN verification. 

The VERIFY PIN function verifies the PIN presented by the Terminal to the UICC. 

Reference: 

TS 102 221, subclause 11.1.9; 

TS 31.102, clause 6; 

TS 22.030, subclause 6.6.1. 

6.1.1.3 Test purpose 

1) To verify that the PIN verification procedure is performed by the Terminal correctly. 

2) To verify that the basic public MMI string is supported. 

6.1.1.4 Method of test 

6.1 .1 .4.1 Initial conditions 

The Terminal is connected to a UICC or UICC simulator with the PIN enabled, and powered off. 
The default UICC is used. 

6.1.1.4.2 Procedure 

a) The Terminal is powered on. 

b) When the UE is in the "PIN check" mode, the sequence "2468#" shall be entered. 

6.1 .1 .5 Acceptance criteria 

1) After step b) the Terminal shall send a VERIFY PIN command to the UICC, with parameter P2 = "01". 

2) After step b) the UE shall give an indication "OK", following a successful execution of the command. 
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6.1.2 Change Of PIN 

6.1 .2.1 Definition and applicability 

The PIN may be changed by the user, by entering the old and new PIN. The length of the PIN is between 4 and 8 digits. 
This test applies to all 3G Terminals. 

6.1.2.2 Conformance requirement 

The Terminal shall support the change of PIN procedure as defined in TS 1 02 22 1 clause 11.10. 
Reference: 

TS 102 221, subclause 11.1.10; 

TS 31.102, clause 6; 

TS 22.030, subclause 6.6.2. 

6.1.2.3 Test purpose 

1) To verify that the PIN substitution procedure is performed correctly by the Terminal. 

2) To verify that the basic public MMI string is supported. 

6.1.2.4 Method of test 

6.1.2.4.1 Initial conditions 

The Terminal is connected to a UICC or UICC simulator with the PIN enabled. 

The default UICC is used. 

The Terminal is powered-on, with the correct PIN entered. 

6.1.2.4.2 Procedure 

a) Enter "**04*2468*01234567*01234567#". 

b) The UE is switched off and on. 

c) When the UE is in the "PIN check" mode, the sequence "2468#" shall be entered. 

d) The UE is switched off and on. 

e) When the UE is in the "PIN-check", mode the sequence "01234567#" shall be entered. 

6.1 .2.5 Acceptance criteria 

1) After step a), the Terminal shall send a CHANGE PIN command to the UICC, with the parameter P2 set to "01". 

2) Following the successful execution of the command, the UE shall give an indication that the new PIN is 
accepted. 

3) After step c), the UE shall give an indication that the entered PIN is not accepted. 
3) After step e), the UE shall give an indication "OK". 
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6.1.3 Unblock PIN 

6.1 .3.1 Definition and applicability 

After three consecutive wrong entries of the PIN, the PIN shall become blocked. The Unblock PIN command is used to 
unblock the PIN. This function may be performed whether or not the PIN is blocked. 

This test applies to 3G Terminals. 

6.1.3.2 Conformance requirement 

The Terminal shall support the Unblock PIN command, as defined in TS 102 221 subclause 11.13. 
Reference: 

TS 102 221,subclause 11.1.13; 

TS 31.102, clause 6; 

TS 22.030, clause 6.6.3. 

6.1.3.3 Test purpose 

1) To verify that the PIN unblocking procedure is performed correctly. 

2) To verify that the basic public MMI string is supported. 

6.1.3.4 Method of test 

6.1.3.4.1 Initial conditions 

The Terminal is connected to the UICC simulator. 
The default UICC is used. 

6.1.3.4.2 Procedure 

a) The Terminal is powered on and the correct PIN is entered. 

b) Enter "**05*13243546*1234*1234#" 

c) The Terminal is powered off and on. 

d) Enter the new PIN: "1234#". 

e) The Terminal is powered off and on. 

f) Enter a wrong PIN three times. 

g) Enter "**05*13243546*2468*2468#". 
h) The Terminal is powered off and on. 
i) Enter the new PIN: "2468#". 

6.1 .3.5 Acceptance criteria 

1) After step b), the Terminal shall send an UNBLOCK PIN command to the UICC, with parameter P2 = "01". 

2) After step d), the Terminal shall indicate that the PIN has been accepted. 

3) After step f), the Terminal shall indicate that the PIN has been blocked. 
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4) After step g), the Terminal shall send an UNBLOCK PIN command to the UICC, with parameter P2 = "01". 

5) After step j), the Terminal shall indicate that the PIN has been accepted. 

6.1.4 Entry of PIN2 

6.1 .4.1 Definition and applicability 

The PIN2 is a number used to authenticate the user to the UICC for security. Entry of the correct PIN2 allows PIN2- 
protected data to be accessed over the UICC-Terminal interface. 

This test applies to all 3G Terminals supporting a feature requiring PIN2 entry (such as e.g. AoC or FDN) 

6.1.4.2 Conformance requirement 

Before allowing the access to PIN2 protected data, the Terminal shall ask the user for PIN2 verification. Only after 
presenting the PIN2, the user shall get access to these data. 

The VERIFY PIN function verifies the PIN2 presented by the Terminal to the UICC. 

Reference: 

TS 102 221, subclause 11.1.9; 

TS 31.102, clause 6; 

TS 22.030, subclause 6.6.1. 

6.1.4.3 Test purpose 

1) To verify that the PIN2 verification procedure is performed by the Terminal correctly. 

2) To verify that the basic public MMI string is supported. 

6.1.4.4 Method of test 

6.1.4.4.1 Initial conditions 

The Terminal is connected to a UICC or UICC simulator with the PIN enabled, and powered off. 

The default UICC is used. 

Note: To perform the UPDATE FDN data (as described in the procedure below), the default FDN UICC may be 
used. 

6.1.4.4.2 Procedure 

a) The Terminal is powered on and the correct PIN is entered. 

b) The access to a PIN2 protected data field shall be performed (e.g. UPDATE FDN) 

c) When the UE is in the "PIN2 check" mode, the sequence "3579#" shall be entered. 

6.1 .4.5 Acceptance criteria 

1) After step b) the Terminal shall send a VERIFY PIN command to the UICC, with parameter P2 = "02". 

2) After step b) the UE shall give an indication "OK", following a successful execution of the command. 
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6.1.5 Change Of PIN2 

6.1 .5.1 Definition and applicability 

The PIN2 may be changed by the user, by entering the old and new PIN2. The length of the PIN2 is between 4 and 8 
digits. 

This test applies to all 3G Terminals supporting a feature requiring PIN2 entry (such as e.g. AoC or FDN) 

6.1.5.2 Conformance requirement 

The Terminal shall support the change of PIN2 procedure as defined in TS 102 221 clause 11.1.10. 
Reference: 

TS 102 221, subclause 11.1.10; 

TS 31.102, clause 6; 

TS 22.030, subclause 6.6.2. 

6.1.5.3 Test purpose 

1) To verify that the P1N2 substitution procedure is performed correctly by the Terminal. 

2) To verify that the basic public MMl string is supported. 

6.1.5.4 Method of test 

6.1.5.4.1 Initial conditions 

The Terminal is connected to a UICC or UICC simulator with the PIN2 enabled. 
The default UICC is used. 

Note: To perform the UPDATE FDN data (as described in the procedure below), the default FDN UICC may be 

used. 

The Terminal is powered-on, with the correct PIN entered. 

6.1.5.4.2 Procedure 

a) Enter "**042*3579*12345678*12345678#". 

b) The UE is switched off and on and the correct PIN is entered. 

c) The access to a PIN2 protected data field shall be performed (e.g. UPDATE FDN) 

d) When the UE is in the "PIN2 check" mode, the sequence "3579#" shall be entered. 

e) The UE is switched off and on and the correct PIN is entered. 

f) The access to a PIN2 protected data field shall be performed (e.g. UPDATE FDN) 

g) When the UE is in the "PIN2-check", mode the sequence "12345678#" shall be entered. 

6.1 .5.5 Acceptance criteria 

1) After step a), the Terminal shall send a CHANGE PIN2 command to the UICC, with the parameter P2 set to 

"02". 
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2) Following the successful execution of the command, the UE shall give an indication that the new PIN2 is 
accepted. 

3) After step d), the UE shall give an indication that the entered PIN2 is not accepted. 
3) After step g), the UE shall give an indication "OK". 

6.1.6 Unblock PIN2 

6.1.6.1 Definition and applicability 

After three consecutive wrong entries of the PIN2, the PIN2 shall become blocked. The Unblock PIN2 command is 
used to unblock the PIN2. This function may be performed whether or not the PIN2 is blocked. 

This test applies to all 3G Terminals supporting a feature requiring PIN2 entry (such as e.g. AoC or FDN) 

6.1.6.2 Conformance requirement 

The Terminal shall support the Unblock PIN2 command, as defined in TS 1 02 22 1 subclause 11.1.13. 
Reference: 

TS 102 221,subclause 11.1.13; 

TS 31.102, clause 6; 

TS 22.030, clause 6.6.3. 

6.1.6.3 Test purpose 

1) To verify that the PIN2 unblocking procedure is performed correctly. 

2) To verify that the basic public MMI string is supported. 

6.1.6.4 Method of test 

6.1.6.4.1 Initial conditions 

The Terminal is connected to the UICC simulator. 

The default UICC is used. 

Note: To perform the UPDATE FDN data (as described in the procedure below), the default FDN UICC may be 
used. 

6.1.6.4.2 Procedure 

a) The Terminal is powered on and the correct PIN is entered. 

b) Enter "**052*089675*1234*1234#" 

c) The Terminal is powered off and on and the correct PIN is entered. 

d) The access to a PIN2 protected data field shall be performed (e.g. UPDATE FDN) 

e) Enter the new PIN2: "1234#". 

f) The Terminal is powered off and on and the correct PIN is entered. 

g) The access to a PIN2 protected data field shall be performed (e.g. UPDATE FDN) 
h) Enter a wrong PIN2 three times. 
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i) Enter "**052*089675*3579*3579#". 

j) The Terminal is powered off and on and the correct PIN is entered. 

k) The access to a PIN2 protected data field shall be performed (e.g. UPDATE FDN) 

1) Enter the new PIN2: "3579#". 

6.1 .6.5 Acceptance criterias 

1) After step b), the Terminal shall send an UNBLOCK PIN command to the UICC, with parameter P2 = "02". 

2) After step e), the Terminal shall indicate that the PIN2 has been accepted. 

3) After step h), the Terminal shall indicate that the PIN2 has been blocked. 

4) After step i), the Terminal shall send an UNBLOCK PIN command to the UICC, with parameter P2 = "02". 

5) After step 1), the Terminal shall indicate that the PIN2 has been accepted. 

6.2 Fixed Dialling Numbers (FDN) handling 

6.2.1 Terminal and USIM with FDN enabled, EFadn readable and updateable 

6.2.1.1 Definition and applicability 

Fixed Dialling Numbers (FDN) is a service defined for the USIM. An enabled FDN service results in call restrictions 
for the UE. The call restrictions are controlled by the Terminal. To ascertain the type of USIM and state of FDN the UE 
runs the FDN capability request procedure during UICC-Terminal initialisation. During the initialisation the Terminal 
shall requests the Emergency call codes of the USIM EFecc. 

This test applies to Terminals accessing UTRAN. Besides of that, this test is applicable only to those Terminals 
supporting FDN. 

6.2.1.2 Conformance requirement 

1) Recognising the state of the USIM (FDN enabled) the UE shall perform the UICC initialisation procedure as 
specified. 

2) The UE allows call set-up to a directory number as stored in EFpoN. 

3) The UE allows call set-up to a directory number as stored in EFfdn and extended by digits in the end. 

4) The UE does not allow call set-up to a directory number stored in EFp^N but with missing digits at the end. 

5) The UE does not allow call set-up to a directory number having no reference in EFfdn- 

6) The UE allows call set-up of an emergency call using the emergency number stored in the Terminal. 

7) The UE allows call set-up of an emergency call using the emergency number stored in the USIM. 
Reference: 

TS 22.101, clause 8 and annex A. 24; 

TS 31.102, subclause 4.4.2, 5.1.1 and 5.3.2. 

6.2.1.3 Test purpose 

1) To verify that the Terminal allows call set-up to a FDN number. 
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2) To verify that the Terminal allows call set-up to a FDN number extended by some digits in the end. 

3) To verify that the Terminal rejects call set-up to number having a reference in EFfdn- 

4) To verify that the Terminal rejects call set-up to a FDN number not completely corresponding to an entry in 

EFpDN. 

5) To verify that the Terminal allows emergency call set-up using the emergency number stored in the Terminal. 

6) To verify that the Terminal allows emergency call set-up using the emergency number stored in the UISM. 

6.2.1.4 Method of test 

6.2.1.4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted 

The default FDN UICC with FDN service enabled and EFadn readable and updateable is installed into the Terminal. 

6.2.1.4.2 Procedure 

a) The UE is powered on and PIN is entered. 

b) Using the MMI a call set-up to the fixed dialling number 1 (record 1) is attempted. 

c) Using the MMI a call set-up to the fixed dialling number 2 (record 2) extended by "123" in the end is attempted. 

d) Using the MMI a call set-up to a number which is equal to the fixed dialling number 3 (record 3) without the last 
digit is attempted, e.g. by recalling the fixed dialling number 3 and deleting the last digit (only in display). 

e) Using the MMI a call set-up to the number "1234567" is attempted. 

f) Using the MMI an emergency call set-up is attempted using the emergency call code stored in the Terminal. 

g) Using the MMI an emergency call set-up is attempted using the emergency call code stored in the USIM (i.e. 

"122"). 

NOTE: For step f) one of the emergency call codes according to 22.101, subclause 8.1 shall be used (i.e. 000, 08, 
112, 110,911 or 999) 

6.2.1 .5 Acceptance criteria 

1) After step a) the UE is registered and in idle state. 

2) After steps b) and c) the UE shall allow call set-up and send the requested number across the air interface. 

3) After steps d) and e) the UE shall prevent call set-up. 

4) After steps f) and g) the UE shall allow emergency call by indicating the call setup as "Emergency Call". 
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6.2.2 Terminal and USIM with FDN disabled 

6.2.2.1 Definition and applicability 

Fixed Dialling Numbers (FDN) is a service defined for the USIM. An enabled FDN service results in call restrictions 
for the UE. Only directory numbers which are stored in the EFp^N may be dialled by the UE. The call restrictions are 
controlled by the Terminal. To ascertain the type of USIM and state of FDN the UE runs the FDN capability request 
procedure during UICC-Terminal initialisation. Deactivation of the service by the subscriber is possible under the 
control of PIN2 and switches the USIM into a "normal", non restrictive USIM. 

This test applies to Terminals accessing UTRAN. Besides of that, this test is applicable only to those Terminals 
supporting FDN. 

6.2.2.2 Conformance requirement 

1) Recognising the state of the USIM (FDN disabled) the UE correctly performs the UICC initialisation procedure. 

2) The UE allows call set-up to a directory number as stored in EFfdn- 

3) The UE allows call set-up to a directory number as stored in EFadn- 

4) The UE allows call set-up to a directory number given in manually. 
Reference: 

TS 22.101, clause 8 and annex A.24; 
TS31.102, subclause 4.4.2, 5.1.1 and 5.3.2. 

6.2.2.3 Test purpose 

1) To verify that the Terminal as a result of the state of the USIM correctly performs the UICC-Terminal 
initialisation procedure. 

2) To verify that the Terminal allows call set-up to a FDN number. 

3) To verify that the Terminal allows call set-up to a ADN number. 

4) To verify that the Terminal allows call set-up to manually given number. 

6.2.2.4 Method of test 
6.2.2.4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted 

The default FDN UICC is used with the following exception: 

EFest (Enable Service Table) 

Logically: 

Fixed Dialling Numbers disabled. 
Barred Dialling Numbers disabled. 
APN Control list (ACL) disabled. 

Coding: Bl 
binary 0000 0000 
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The UICC is installed into the Terminal and the UE is powered on. 

6.2.2.4.2 Procedure 

a) Using the MMI a call set-up to the fixed dialling number 1 is attempted. 

b) Using the MMI a call set-up to the abbreviated dialling number 1 is attempted. 

c) Using the MMI a call set-up to the number "1234567" is attempted. 

6.2.2.5 Acceptance criteria 

After steps a), b) and c) the UE shall allow call set-up and send the requested number across the air interface. 

6.2.3 Enabling, disabling and updating of FDN 

6.2.3.1 Definition and applicability 

FDN may be enabled and disabled by the subscriber under control of PIN2. Fixed dialling numbers are read with PIN 
and updated under control of PIN2. 

This test applies to Terminals accessing UTRAN. Besides of that, this test is applicable only to those Terminals 
supporting FDN. 

6.2.3.2 Conformance requirement 

1) Recognising the state of the USIM (FDN enabled) the UE shall perform the UICC initialisation procedure as 
specified. 

2) The UE shall allow updating of EFp^N by the use of PIN2. 

3) The UE provides means to disable the FDN service by the use of PIN2. 

4) The UE shall allow the use of EFadn after disabling of FDN. 
Reference: 

TS 22.101, clause 8; 

TS 31.102, subclause 4.4.2, 5.1.1 and 5.3.2. 

6.2.3.3 Test purpose 

1) To verify that the Terminal correctly performs the update of a number in EFfdn- 

2) To verify that the Terminal correctly disables FDN service. 

3) To verify that the Terminal recognises disabling of FDN and allows access to EFadn- 

6.2.3.4 Method of test 
6.2.3.4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted 
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The default FDN UICC with FDN service enabled is installed into the Terminal. 

6.2.3.4.2 Procedure 

a) The UE is powered on and PIN is entered. 

b) Using the MMI the directory number "+876543210" is stored in EFfdn as fixed dialling number 1 (record 1). 
The alpha identifier is not changed. On request of the UE PIN2 is entered. 

c) Using the MMI the FDN disabling procedure is performed. On request of the UE PIN2 is entered. 

d) Using the MMI a call set-up to the abbreviated dialling number 1 (record 1) is attempted. 

e) The UE is soft-powered down. 

6.2.3.5 Acceptance criteria 

1) After step a) the UE is registered and in idle state. 

2) After step c) the UE shall indicate that the FDN disabling procedure has been successful. 

3) After step d) the UE shall allow call set-up and send the requested number across the air interface. 

4) After step e) record 1 in EFpoN , shall contain the following values: 



Hex 



Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


B13 


46 


44 


4E 


31 


31 


31 


06 


91 


78 


56 


34 


12 


FO 


B14 


B15 


B16 


B17 


B18 


B19 


B20 














FF 


FF 


FF 


FF 


FF 


FF 


FF 















6.3 Barred Dialling numbers (BDN) handling 
6.3.1 Terminal and USIIVI with BDN enabled 

6.3.1 .1 Definition and applicability 

Barred Dialling Numbers (BDN) is a service defined for the USIM. An enabled BDN service results in call restrictions 
for the UE. The call restrictions are controlled by the Terminal. To ascertain the type of USIM and state of BDN the UE 
runs the BDN capability request procedure during UICC-Terminal initialisation. 

This test applies to Terminals accessing UTRAN. Besides of that, this test is applicable only to those Terminals 
supporting BDN. 

6.3.1.2 Conformance requirement 

1) Recognising the state of the USIM (BDN enabled) the UE shall perform the UICC initialisation procedure as 
specified. 

2) The UE prevent call set-up to a any number stored in EFbdn- 

3) The UE allows call set-up of an emergency call, even if this number is stored in the USIM. 
Reference: 

TS 22. 101, Annex 19; 

TS 31.102, subclause 5.1.1 and 5.3.2. 
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6.3.1.3 Test purpose 

1) To verify that the Terminal rejects call set-up to any number that has an entry in EFbdn- 

2) To verify that the Terminal allows call set-up to any number other number not stored in EFbdn- 

3) To verify that the Terminal allows emergency call set-up even if the number is stored in EFbdn- 

6.3.1.4 Method of test 

6.3.1.4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted 

The default BDN UICC with BDN service enabled is installed into the Terminal. 

6.3.1.4.2 Procedure 

a) The UE is powered on and PIN is entered. 

b) Using the MMI a call set-up to the barred dialling number 1 (record 1) is attempted. 

c) Using the ADN entry a call set-up to the abbreviated dialling number 1 (record 1) end is attempted. 

d) Using the MMI a call set-up to the number "123456" is attempted. 

e) Using the MMI an emergency call set-up is attempted using the emergency call code stored in the Terminal 

f) Using the MMI an emergency call set-up is attempted using the emergency call code stored in the USIM (i.e. 

"122"). 

NOTE: For step e) one of the emergency call codes according to 22.101, subclause 8.1 is used (i.e. 000, 08, 112, 
110,911 or 999) 

6.3.1 .5 Acceptance criteria 

1) After step a) the UE is registered and in idle state. 

3) After steps b) and c) the UE shall prevent call set-up. 

2) After step d) the UE shall allow call set-up and send the requested number across the air interface. 

4) After step f) and g) the UE shall allow emergency call by indicating the call setup as "Emergency Call". 
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6.3.2 Terminal and USIM with BDN disabled 

6.3.2.1 Definition and applicability 

Barred Dialling Numbers (BDN) is a service defined for the USIM. An enabled BDN service results in call restrictions 
for the UE. No numbers which are stored in the EFbdn may be dialled by the UE. The call restrictions are controlled by 
the Terminal. To ascertain the type of USIM and state of FDN the UE runs the FDN capability request procedure during 
UICC-Terminal initialisation. Deactivation of the service by the subscriber is possible under the control of PIN2 and 
switches the USIM into a "normal", non restrictive USIM. When the BDN is disabled no special controls are specified. 
The BDN may be read as if they were normal ADN. However a modification or deletion of the a BDN is under PIN2 
control. 

This test applies to Terminals accessing UTRAN. Besides of that, this test is applicable only to those Terminals 
supporting BDN. 

6.3.2.2 Conformance requirement 

1) Recognising the state of the USIM (FDN disabled) the UE correctly performs the UICC initialisation procedure. 

2) The UE allows call set-up to a directory number as stored in EFbdn- 

3) Any change to the EFbdn does requests PIN2. 
Reference: 

TS 22.101, clause 8 and annex A.19; 
TS 31.102, subclause 5.1.1 and 5.3.2. 

6.3.2.3 Test purpose 

1) To verify that the Terminal as a result of the state of the USIM correctly performs the UICC-Terminal 
initialisation procedure. 

2) To verify that the Terminal allows call set-up to a BDN number. 

3) The UE shall allow updating of EFbdn by the use of PIN2. 

6.3.2.4 Method of test 
6.3.2.4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted 

The default FDN UICC is used with the following exception: 

EFest (Enable Service Table) 

Logically: 

Fixed Dialling Numbers disabled. 
Barred Dialling Numbers disabled. 
APN Control list (ACL) disabled. 

Coding: Bl 
binary 0000 0000 
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The UICC is installed into the Terminal and the UE is powered on. 

6.3.2.4.2 Procedure 

a) Using the MMI a call set-up to the barred dialling number 1 is attempted. 

b) Using the MMI the directory number "+876543210" is stored in EFbdn as fixed dialling number 1 (record 1). 
The alpha identifier is not changed. On request of the UE PIN2 is entered. 

6.3.2.5 Acceptance criteria 

1) After step a) the UE shall allow call set-up and send the requested number across the air interface. 
4) After step b) record 1 in EFbdn , shall contain the following values: 



Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


B13 


Hex 


42 
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FF 
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6.4 Advice of charge (AoC) handling 

6.4.1 AoC not supported by USIIVI 

6.4.1 .1 Definition and applicability 

If the Terminal under test supports Advice of Charge Charging, it shall still look at the capability of the USIM, before 
responding to any AoCC information from the network. 

This test applies to Terminals accessing UTRAN. Besides of that, this test is applicable only to those Terminals 
supporting AoCC. 

6.4.1.2 Conformance requirement 

1) An UE not supporting AoCC and in the outgoing call / U4 call delivered state, on receipt of a CONNECT 
message containing AoCC information shall acknowledge the CONNECT message but ignore and not 
acknowledge the AoCC information sent within the CONNECT. 

2) An UE not supporting AoCC and in the outgoing call / U4 call delivered state, on receipt of a FACILITY 
message containing AoCC information shall ignore and not acknowledge the AoCC information sent within the 
FACILITY. 

3) An UE not supporting AoCC and in the incoming call / U9 call confirmed state, on receipt of a FACILITY 
message containing AoCC information shall ignore and not acknowledge the AoCC information sent within the 
FACILITY. 

4) An UE not supporting AoCC and in the UIO call active state, on receipt of a FACILITY message containing 
AoCC information, shall ignore and not acknowledge the AoCC information sent within the FACILITY. 

References: 

TS 24.008, subclause 5.1.2.1; 

TS 23.086, subclause 1.2, 1.3, 2.2 and 2.3; 

TS 24.086, clause 2. 
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6.4.1.3 Test purpose 

1) To verify that an UE not supporting AoCC (where the Terminal does support AoCC but the USIM does not) and 
in the outgoing call / U4 call delivered state, on receipt of a CONNECT message containing AoCC information 
shall acknowledge the CONNECT message but ignore and not acknowledge the AoCC information sent within 
the CONNECT. 

2) To verify that an UE not supporting AoCC (where the Terminal does support AoCC but the USIM does not) and 
in the outgoing call / U4 call delivered state, on receipt of a FACILITY message containing AoCC information 
shall ignore and not acknowledge the AoCC information sent within the FACILITY. 

3) To verify that an UE not supporting AoCC (where the Terminal does support AoCC but the USIM does not) and 
in the incoming call / U9 call confirmed state, on receipt of a FACILITY message containing AoCC information 
shall ignore and not acknowledge the AoCC information sent within the FACILITY. 

4) To verify that an UE not supporting AoCC (where the Terminal does support AoCC but the USIM does not) and 
in the UIO call active state, on receipt of a FACILITY message containing AoCC information, shall ignore and 
not acknowledge the AoCC information sent within the FACILITY. 

6.4.1.4 Method of test 
6.4.1.4.1 Initial conditions 

The Terminal shall be installed with a UICC or USIM simulator, with all elementary files coded as for the default 
UICC, with the exception of: 

EFusT (USIM Service Table) 
Logically: 

Local Phone Book available; 

User controlled PLMN selector available; 

Fixed dialling numbers available; 

The GSM Access available; 

The Group Identifier level 1 and level 2 not available; 

AoC not available. 



Coding: 


Bl 


B2 


B3 


B4 


binary 


XXXX XX 11 


XXXO XXXX 


XXXX 1x00 


XXXX xlxx 



The coding of EFust shall conform with the capabilities of the USIM used. 

The generic call set up procedures are followed up to and including the reception, or transmission of the ALERTING 
message by the UE. 

6.4.1.4.2 Procedure 

a) For an MO call in the U4 state the USS transmits CONNECT containing AoCC information. 

b) For an MO call in the U4 state the USS transmits FACILITY containing AoCC information. 

c) For an MT call in the U9 state the USS transmits FACILITY containing AoCC information. 

d) For an MO call in the UIO state the USS transmits FACILITY containing AoCC information. 

6.4.1 .5 Acceptance criteria 

In all cases, the UE shall ignore the AoCC information sent to it in the Facility information elements as part of the 
CONNECT/FACILITY messages and not send any AoCC information acknowledgement. It shall be checked for 15 
seconds that the UE does not transmit any AoCC information acknowledgement after the receipt of AoCC information. 
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6.4.2 Maximum frequency of ACM updating 

6.4.2.1 Definition and applicability 

The ACM shall be updated at the end of every interval, where the interval length is given by parameter e2. The 
Terminal shall update the ACM not more frequently than once every 5 seconds, even if the interval is less than 5 
seconds. More frequent updating may affect the USIMs read/write cycles. 

This test applies to Terminals accessing UTRAN. Besides of that, this test is applicable only to those Terminals 
supporting AoCC. 

6.4.2.2 Conformance requirement 

The ACM shall be incremented when the CCM is incremented or once every 5 seconds, whichever is the longer period. 
Reference: 

TS 22.024, subclause 4.3, part h. 

6.4.2.3 Test purpose 

To verify that the interval between increments is 5 seconds. 

6.4.2.4 Method of test 
6.4.2.4.1 Initial conditions 

The Terminal shall be connected to the USIM simulator, with all elementary files coded as default with the exception 
of: 

EFusT (USIM Service Table) 
Logically: 

Local Phone Book available; 

User controlled PLMN selector available; 

Fixed dialling numbers available; 

The GSM Access available; 

The Group Identifier level 1 and level 2 not available; 

AoC available. 

Coding: Bl B2 B3 B4 

binary xxxxxxll xxxl xxxx xxxx 1x00 xxxxxlxx 

The coding of EFust shall conform with the capabilities of the USIM used. 

EFacm (Accumulated call meter) 
Logically: 50 units 

EFACMmax (Accumulated call meter maximum) 
Logically: 150 units 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

User Equipment: 

The UE is in MM-state "idle, updated". 
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6.4.2.4.2 Procedure 

a) The UE is made to initiate a calL The call is established with AoCC e-parameters sent in a Facility IE in the 
CONNECT message, as given below. The UE returns the AoCC acknowledgement within 1 second of the 
CONNECT message. It is an implementation option whether the AoCC acknowledge is sent by the UE before or 
after the CONNECT ACKNOWLEDGE. 

b) The call is maintained for 90 seconds, then terminated by the USS. During the call, the USIM-simulator 
monitors the time intervals between successive INCREMENT commands. 

Maximum Duration of Test: 
2 minutes. 

Expected Sequence: 



Step 


Direction 


Message 


Comments 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 


UE 
UE->USS 
USS->UE 
UE -> USS 
USS->UE 
UE -> USS 
USS->UE 
USS->UE 
UE -> USS 
USS->UE 
USS->UE 


CHANNEL REQUEST 

IMMEDIATE ASSIGNMENT 

CM SERVICE REQUEST 

CM SERVICE ACCEPT 

SETUP 

CALL PROCEEDING 

ASSIGNMENT COMMAND 

ASSIGNMENT COMPLETE 

ALERTING 

CONNECT 


The UE is made to initiate a call 

To a supported channel type 

As default message except contains Facility IE with 
contents as indicated in i) below 








Either A or B branch is taken 


A12 
A13 


UE -> USS 
UE -> USS 


CONNECT ACKNOWLEDGE 
FACILITY 


As default message except contains Facility IE with 
contents as indicated in ii) below 


B12 
B13 


UE -> USS 
UE -> USS 


FACILITY 

CONNECT ACKNOWLEDGE 


As default message except contains Facility IE with 
contents as indicated in ii) below 


14 






call duration 90 seconds after CAI information sent by 
USS, 


15 
16 
17 
18 


USS->UE 
UE -> USS 
USS->UE 
USS->UE 


DISCONNECT 
RELEASE 

RELEASE COMPLETE 
CHANNEL RELEASE 


The main signalling link is released. 



Specific Message Contents: 

i) FACILITY Information Element with Invoke = ForwardChargelnformation component type as defined in 

TS 24.080 subclause 3.6.1 table 3.3. 

For ASN.l description see default message contents in subclause 31.6.1.3. 

The values of the e-parameters within the parameter part of the Facility Information Element shall be set as below: 

e-parameters: 

parameter: el e2 e3 e4 e5 e6 e7 
value 1110 

Values shown in table are in the format and have units as in TS 22.024 clause 3. 

ii) FACILITY Information Element with Return Result component type as defined in TS 24.080 subclause 3.6.1 
table 3.4. 

For ASN.l description see default message contents in subclause 31.6.1.3. 
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6.4.2.5 Acceptance criteria 

The UE shall send INCREMENT commands to the USIM every 5 seconds. 

6.4.3 Call terminated when ACM greater than ACMmax 

6.4.3.1 Definition and applicability 

ACMmax gives the maximum value of ACM, at which the current chargeable calls shall be terminated and no further 
calls may be made (except emergency calls). 

This test applies to Terminals accessing UTRAN. Besides of that, this test is applicable only to those Terminals 
supporting AoCC. 

6.4.3.2 Conformance requirement 

ACM shall be incremented by the value of CCM. 

If the ACMmax is valid, and the ACM becomes equal to or exceeds the value of the ACMmax, then all calls in 
progress, chargeable to the user, shall be terminated by the UE, once the chargeable interval determined by the CAI has 
elapsed, (except emergency calls). 

Reference: 

TS 22.024, subclause 4.2.2 and subclause 4.3 part h; 
TS 102 221, subclause 14.1.3. 

6.4.3.3 Test purpose 

1) To verify that the Terminal increments the ACM by the correct number of units, even though this may take 
ACM above ACMmax. 

2) To verify that the Terminal terminates the call. 

3) To verify that the INCREMENT EFacm command is performed correctly by the terminal. 

6.4.3.4 Method of test 
6.4.3.4.1 Initial conditions 

The Terminal shall be connected to a UICC or the USIM simulator, with all elementary files coded as default with the 
exception of: 

EFust (USIM Service Table) 
Logically: 

Local Phone Book available; 

User controlled PLMN selector available; 

Fixed dialling numbers available; 

The GSM Access available; 

The Group Identifier level 1 and level 2 not available; 

AoC available. 

Coding: Bl B2 B3 B4 

binary xxxxxxll xxxl xxxx xxxx 1x00 xxxxxlxx 

The coding of EFust shall conform with the capabilities of the USIM used. 
EFacm (Accumulated call meter) 
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Logically: 80 units 

Coding: Bl B2 B3 

binary 0000 0000 0000 0000 01010000 

EpACMmax (Accumulatcd call meter maximum) 
Logically: 94 units 

Coding: Bl B2 B3 

binary 1111 1111 1111 1111 0101 1110 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

User Equipment: 

The UE is in MM-state "idle, updated". 

6.4.3.4.2 Procedure 

a) The UE is made to initiate a call. The call is established with AoCC e-parameters sent in a Facility IE in the 
CONNECT message, as given below. The UE returns the AoCC acknowledgement within 1 second of the 
CONNECT message. It is an implementation option whether the AoCC acknowledge is sent by the UE before or 
after the CONNECT ACKNOWLEDGE. 

b) The call is maintained until cleared by the UE (after 30 seconds). 

c) The contents of ACM are checked. 

Maximum Duration of Test: 
2 minutes. 

Expected Sequence: 
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Step 


Direction 


Message 


Comments 


1 
2 
3 
4 
5 
6 
7 
8 

9 

10 
11 


UE 
UE->USS 
USS->UE 
UE -> USS 
USS->UE 
UE -> USS 
USS->UE 
USS->UE 

UE -> USS 
USS->UE 
USS->UE 


CHANNEL REQUEST 

IMMEDIATE ASSIGNMENT 

CM SERVICE REQUEST 

CM SERVICE ACCEPT 

SETUP 

CALL PROCEEDING 

ASSIGNMENT COMMAND 

to a supported channel type 

ASSIGNMENT COMPLETE 

ALERTING 

CONNECT 


The UE is made to initiate a call 

As default message except contains Facility IE with 
contents as indicated in i) below 








Either A or B branch is taken 


A12 
A13 


UE -> USS 
UE -> USS 


CONNECT ACKNOWLEDGE 
FACILITY 


As default message except contains Facility IE with 
contents as indicated in ii) below 


B12 
B13 


UE -> USS 
UE -> USS 


FACILITY 

CONNECT ACKNOWLEDGE 


As default message except contains Facility IE with 
contents as indicated in ii) below 


14 






call duration 30 seconds after CAI information sent by 
USS 


15 
16 
17 
18 


UE -> USS 
USS->UE 
UE->USS 
UE->USS 


DISCONNECT 
RELEASE 

RELEASE COMPLETE 
CHANNEL RELEASE 


The main signalling link is released. 



Specific Message Contents: 

i) FACILITY Information Element with Invoke = ForwardChargelnformation component type as defined in 

TS 24.080 subclause 3.6.1 table 3.3. 

For ASN.l description see default message contents in subclause 31.6.1.3. 

The values of the e-parameters within the parameter part of the Facility Information Element shall be set as below: 

e-parameters: 

parameter: el e2 e3 e4 e5 e6 e? 
value 10 10 1 

Values shown in table are in the format and have units as in TS 22.024 clause 3. 

ii) FACILITY Information Element with Return Result component type as defined in TS 24.080 subclause 3.6.1 
table 3.4. 

For ASN.l description see default message contents in subclause 31.6.1.3. 

6.4.3.5 Acceptance criteria 

1) The UE shall terminate the call correctly 30 seconds after CAI was sent. 

2) The value of ACM shall be 100 units. 

6.4.4 Response codes of increase command of ACM 
6.4.4.1 Definition and applicability 

ACM has a maximum value in terms of coding, and an attempt by the Terminal to exceed that value by sending an 
INCREASE command shall result in an error message from the USIM. As the maximum of the ACM is equal to the 
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maximum value of ACMmax, all current chargeable calls shall be terminated and no farther calls may be made (except 
emergency calls). 

This test applies to Terminals accessing UTRAN. Besides of that, this test is applicable only to those Terminals 
supporting AoCC. 

6.4.4.2 Conformance requirement 

The Terminal shall perform the increasing procedure, sending the amount to be increased. 

The running accumulated charge shall be stored in the ACM of the USIM. 

Where this charge cannot be stored in the UE, use of the telecommunications service shall be prevented. 

At the time ACM exceeds it's maximum value, then all calls in progress, chargeable to the user, shall be terminated by 
the UE, once the chargeable interval determined by the CAI has elapsed, (except emergency calls). 

References: 

TS 31.102, subclause 5.3.4; 

TS 22.086, subclauses 2.1 and 2.2.1. 

6.4.4.3 Test purpose 

To verify that the Terminal clears a charged call if the USIM indicates that the ACM cannot be increased. 

6.4.4.4 Method of test 
6.4.4.4.1 Initial conditions 

The Terminal shall be connected to the USIM simulator, with all elementary files coded as default with the exception 
of: 

EFusT (USIM Service Table) 
Logically: 

Local Phone Book available; 

User controlled PLMN selector available; 

Fixed dialling numbers available; 

The GSM Access available; 

The Group Identifier level 1 and level 2 not available; 

AoC available. 

Coding: Bl B2 B3 B4 

binary xxxx xxll xxxl xxxx xxxx 1x00 xxxxxlxx 

The coding of EFust shall conform with the capabilities of the USIM used. 

EFacm (Accumulated call meter) 
Logically: (Maximum value - 10) units 

Coding: Bl B2 B3 

binary 11111111 11111111 11110101 

EF ACMmax (Accumulated call meter maximum) 
Logically: (Maximum value - 2) units 

Coding: Bl B2 B3 

binary 1111 1111 1111 1111 1111 1101 



£75/ 



3GPP TS 31.121 version 3.0.0 Release 1999 



60 



ETSI TS 131 121 V3.0.0 (2000-12) 



The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 



User Equipment: 

The UE is in MM-state "idle, updated". 



6.4.4.4.2 Procedure 

a) The UE is made to initiate a call. The call is established with AoCC e-parameters sent in a Facility IE in the 
CONNECT message, as given below. The UE returns the AoCC acknowledgement within 1 second of the 
CONNECT message. It is an implementation option whether the AoCC acknowledge is sent by the UE before or 
after the CONNECT ACKNOWLEDGE. 

b) After an interval has elapsed, the Terminal increments the ACM. When an INCREASE command is received, 
the USIM-simulator sends back the error "98 50". 

c) Conditions are reset to those described in the initial conditions. Steps a) and b) of the test are repeated, except 
that the error code sent by the USIM simulator at step b) is now "6F xx". 

d) Conditions are reset to those described in the initial conditions. Steps a) and b) of the test are repeated, except 
that the error code sent by the USIM simulator at step b) is now "65 81". 

References: 

TS 102 221, subclause 10.2.1. 

Maximum Duration of Test: 
3 minutes. 

Expected Sequence: 



Step 


Direction 


Message 


Comments 


1 
2 
3 
4 
5 
6 
7 
8 

9 
10 
11 


UE 
UE->USS 
USS->UE 
UE->USS 
USS->UE 
UE->USS 
USS->UE 
USS->UE 

UE -> USS 
USS->UE 
USS->UE 


CHANNEL REQUEST 

IMMEDIATE ASSIGNMENT 

CM SERVICE REQUEST 

CM SERVICE ACCEPT 

SETUP 

CALL PROCEEDING 

ASSIGNMENT COMMAND 

to a supported channel type 

ASSIGNMENT COMPLETE 

ALERTING 

CONNECT 


The UE is made to initiate a call 

As default message except contains Facility IE with 
contents as indicated in i) below 








Either A or B branch is taken 


A12 
A13 


UE -> USS 
UE -> USS 


CONNECT ACKNOWLEDGE 
FACILITY 


As default message except contains Facility IE with 
contents as indicated in ii) below 


B12 
B13 


UE -> USS 
UE -> USS 


FACILITY 

CONNECT ACKNOWLEDGE 


As default message except contains Facility IE with 
contents as indicated in ii) below 


14 
15 
16 
17 
18 


UE -> USS 
USS->UE 
UE -> USS 
UE->USS 


DISCONNECT 
RELEASE 

RELEASE COMPLETE 
CHANNEL RELEASE 


call duration 10s after CAI information sent by USS 
The main signalling link is released. 
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Specific Message Contents: 

i) FACILITY Information Element with Invoke = ForwardChargelnformation component type as defined in 
TS 24.080 subclause 3.6.1 table 3.3. 

The values of the e-parameters within the parameter part of the Facility Information Element shall be set as below: 

e-parameters: 



parameter 


: el 


e2 


e3 


e4 


e5 


e6 


e7 


value 


20 


10 


1 















Values shown in table are in the format and have units as in TS 22.024 clause 3. 

ii) FACILITY Information Element with Return Result component type as defined in TS 24.080 subclause 3.6.1 
table 3.4. 

6.4.4.5 Acceptance criteria 

1) The UE shall terminate the call correctly 10 seconds after CAI was sent. 

2) In each of the three cases, as described in steps b), c) and d) of the procedure, the UE shall terminate the call 
correctly when it receives an indication from the USIM that the ACM cannot be incremented. 



7 PLMN related tests 

7.1 FPLMN handling 

7.1.1 Adding FPLMN to the Forbidden PLMN list 

7.1 .1 .1 Definition and applicability 

A list of forbidden PLMNs stored in the USIM and providing storage for at least 4 entries is managed by the UE. In 
automatic PLMN selection mode the UE controls location updating attempts to appropriate networks with respect to 
this list of forbidden PLMNs. As a result of a location update reject with the cause "PLMN not allowed" the UE stores 
the PLMN which rejected the update request in the USIM. 

After a location update, which is not followed by an authentication procedure, the Key Set Identifier indicates that the 
Key Set Identifier is undefined. 

This test applies to Terminals accessing UTRAN. 

7.1.1.2 Conformance requirement 

1) In automatic PLMN selection mode the UE shall only attempt a LOCATION UPDATE if it receives a BCCH 
containing a LAI that is not indicated in the EFpplmn in the USIM. 

Reference: 

TS 22.011, subclause 2.3; 

TS 31.102, subclause 5.1.1 and 5.2.7. 

2) After receipt of a LOCATION UPDATE REJECT message with the cause "PLMN not allowed" the Terminal 
shall update the EFfplmn in the USIM. 

Reference: 
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TS 22.011, subclause 2.3,; 

TS 31.102, subclause 5.1.1 and 5.2.7. 

3) After call termination the USIM shall contain the correct Key Set Identifier. 
Reference: 

TS31.102, subclause 5.1.2, 5.2.5 and 5.2.6; 
TS 21.111 subclause 10.1. 

4) After call termination the USIM shall contain the correct TMSI and location information received by the UE. 
Reference: 

TS31.102, subclause 5.1.2, 5.2.5 and 5.2.6; 
TS 21.111 subclause 10.1. 

7.1.1.3 Test purpose 

1) To verify that in automatic PLMN selection mode the UE does not attempt to access PLMNs stored in EFfplmn 
on the USIM. 

2) To verify that the EFpplmn is correctly updated by the Terminal after receipt of a LOCATION UPDATE 
REJECT message with cause "PLMN not allowed". 

3) To verify that the EFKey has been correctly updated by the Terminal. 

4) To verify that the EFloci has been correctly updated by the Terminal. 

7.1.1.4 Method of test 
7.1 .1 .4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 234/002/0001 
Access control: unrestricted. 

The default UICC is used with the following exception: 

EFn^si(IMSI) 

Logically: 246081111111111 



Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


Hex 


08 


29 


64 


80 


11 


11 


11 


11 


11 



EFloci (Location Information) 



Logically 


: LAI-MCC: 
LAI-MNC 
LAI-LAC: 
TMSI: 


: 234 
: 007 

0000 
"32547698" 
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B7 


B8 
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32 


04 
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00 


00 
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The UICC is installed into the Terminal and the UE is set to automatic PLMN selection mode. 

EpKey (Ciphering and Integrity Key) 

Logically: Key Set Identifier KSI: 02 

Ciphering Keys CK: undefined 
Integrity Keys IK: undefined 



Coding: Bl B2 


B3 


B16 


B17 


B18 


B30 


B31 


B32 


Hex 02 XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


7.1.1.4.2 Procedure 
















a) The UE is powered on. 

















b) The USS stops all RF output on the BCCH for a long enough period of time to cause a cell reselection procedure 
in the UE. The BCCH is changed to contain: 

LAI (MCC/MNC): 234/003 

The USS then resumes RF output on the BCCH. 

c) The USS stops all RF output on the BCCH for a long enough period of time to cause a cell reselection procedure 
in the UE. The BCCH is changed to contain: 

LAI (MCC/MNC): 234/004 

The USS then resumes RF output on the BCCH. 

d) The USS stops all RF output on the BCCH for a long enough period of time to cause a cell reselection procedure 
in the UE. The BCCH is changed to contain: 

LAI (MCC/MNC): 234/005 

The USS then resumes RF output on the BCCH. 

e) The USS stops all RF output on the BCCH for a long enough period of time to cause a cell reselection procedure 
in the UE. The BCCH is changed to contain: 

LAI (MCC/MNC): 234/007 

The USS then resumes RF output on the BCCH. 

f) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

g) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
REJECT to the UE with cause "PLMN Not Allowed", followed by CHANNEL RELEASE. 

The USS stops all RF output on the BCCH for a long enough period of time to cause a cell reselection procedure 
in the UE. The BCCH is changed to contain: 

LAI (MCC/MNC): 234/008 

The USS then resumes RF output on the BCCH. 

h) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

i) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 234/008 
TMSI: "43658709" 
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to the UE. 

j) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the USS sends CHANNEL RELEASE to 
theUE. 

k) The UE is soft powered down. 

7.1 .1 .5 Acceptance criteria 

1) After each of the steps a) to d) the UE shall not attempt a LOCATION UPDATE. 

2) After step f) the UE shall send LOCATION UPDATE REQUEST to the USS. 

3) After step h) the UE shall send LOCATION UPDATE REQUEST to the USS. 

4) After step i) the UE shall respond with TMSI REALLOCATION COMPLETE. 

5) After step k) the USIM shall contain the following values: 
EFloci (Location Information) 



Logically: LAI-MCC 


234 


















LAI-MNC 


: 008 


















TMSI: 


"43658709" 


















Coding: BI 


B2 B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


Hex 43 


65 87 


09 


32 


04 


80 


XX 


XX 


XX 


00 



EpKey (Ciphering and Integrity Key) 



Logically: Key Set Identifier KSI: 
Ciphering Keys CK: 
Integrity Keys IK: 



07 (not available) 

XX 
XX 



Coding: Bl 
Hex 07 



B2 

XX 



B3 

XX 



B16 

XX 



B17 

XX 



B18 

XX 



B30 



B31 



B32 



EFppLMN (Forbidden PLMNs) 



Logically 


: PLMNl 
PLMN2 
PLMN3 
PLMN4 
PLMN5 
PLMN6 


234 002 (MCC MNC) 

234 003 

234 004 

234 005 

234 006 

234 007 


















Coding: 
Hex 


Bl 

32 

B13 

32 


B2 B3 
04 20 

B14 B15 
04 60 


B4 

32 

B16 

32 


B5 

04 

B17 
04 


B6 

30 

B18 
70 


B7 

32 


B8 

04 


B9 

40 


BIO 

32 


Bll 

04 


B12 

50 



7.1 .2 UE updating forbidden PLMNs 
7.1 .2.1 Definition and applicability 

A list of forbidden PLMNs stored in the USIM provides storage for at least 4 entries, and is managed by the UE. In 
automatic PLMN selection mode the UE controls location updating attempts to appropriate networks with respect to 
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this list of forbidden PLMNs. As a result of a location update reject with the cause "PLMN not allowed" the UE stores 
the PLMN which rejected the update request in the USIM. 

This test applies to Terminals accessing UTRAN. 

7.1.2.2 Conformance requirement 

After the receipt of a LOCATION UPDATE REJECT message with the cause "PLMN not allowed" the UE shall update 
the EFppLMN in the USIM. 

Reference: 

TS 22.011, subclause 3.2.2.4. 

7.1.2.3 Test purpose 

To verify that the UE correctly updates the EFpplmn^ ie. fill up existing gaps in the elementary file before overwriting 
any existing entries. 

7.1.2.4 Method of test 



7.1.2.4.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters: 



Attach/detach: 

LAI (MCC/MNC/LAC): 

Access control: 



disabled 

234/002/0001 

unrestricted. 



The default UICC is used with the following exception: 
EFfplmn (Forbidden PLMNs) 



Logically 


: PLMNl 
PLMN2 
PLMN3 
PLMN4 
PLMN5 
PLMN6 


234 001 (MCC MNC) 

empty 

234 003 

234 004 

234 005 

234 006 


















Coding: 
Hex 


Bl 

32 

B13 

32 


B2 B3 

04 10 

B14 B15 
04 50 


B4 
FF 

B16 

32 


B5 
FF 

B17 
04 


B6 
FF 

B18 
60 


B7 

32 


B8 

04 


B9 

30 


BIO 

32 


Bll 
04 


B12 

40 



The UICC is installed into the Terminal and the UE is set to automatic PLMN selection mode. 

7.1.2.4.2 Procedure 

a) The UE is powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
REJECT to the UE with the cause "PLMN not allowed", followed by CHANNEL RELEASE. 

d) The UE is soft powered down. 



£75/ 



3GPP TS 31.121 version 3.0.0 Release 1999 



66 



ETSI TS 131 121 V3.0.0 (2000-12) 



7.1 .2.5 Acceptance criteria 

1) After step b) the UE shall send LOCATION UPDATE REQUEST to the USS. 

2) After step d) the USIM shall contain: 
EFppLMN (Forbidden PLMNs) 



Logically 


: PLMNl 
PLMN2 
PLMN3 
PLMN4 
PLMN5 
PLMN6 


234 001 (MCC MNC) 

234 002 

234 003 

234 004 

234 005 

234 006 


















Coding: 
Hex 


Bl 

32 

B13 

32 


B2 B3 
04 10 

B14 B15 
04 50 


B4 

32 

B16 

32 


B5 

04 

B17 
04 


B6 

20 

B18 
60 


B7 

32 


B8 

04 


B9 
30 


BIO 

32 


Bll 
04 


B12 
40 



or 



EFppLMN (Forbidden PLMNs) 



Logically 


: PLMNl 
PLMN2 
PLMN3 
PLMN4 
PLMN5 
PLMN6 


234 001 (MCC MNC) 

234 003 

234 004 

234 005 

234 006 

234 002 


















Coding: 
Hex 
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32 

B13 

32 


B2 B3 
04 10 

B14 B15 
04 60 


B4 

32 

B16 

32 


B5 

04 

B17 
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B6 

30 

B18 
20 


B7 

32 


B8 

04 


B9 

40 


BIO 

32 


Bll 
04 


B12 
50 



7.1 .3 UE deleting forbidden PLMNs 
7.1 .3.1 Definition and applicability 

In manual PLMN selection mode the UE allows location update attempts to all available PLMNs, including forbidden 
PLMNs (as indicated by the forbidden PLMN list on the USIM). As a result of a successful location update procedure 
onto a PLMN which is in the forbidden PLMN list, the forbidden PLMN list is automatically updated by the UE. 

This test applies to Terminals accessing UTRAN. 
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7.1.3.2 Conformance requirement 

1) In manual PLMN selection mode the UE shall be able to perform a LOCATION UPDATE attempt to a PLMN 
which is in the forbidden PLMN list. 

TS 22.011, subclause 3.2.2.2. 

2) After receipt of LOCATION UPDATE ACCEPT the UE shall delete the forbidden PLMN from the forbidden 
PLMN list. 

TS 22.011, subclause 3.2.2.4. 

7.1.3.3 Test purpose 

1) To verify that the UE is able to perform a LOCATION UPDATE on a forbidden PLMN in manual PLMN 
selection mode. 

2) To verify that the UE after a successful LOCATION UPDATE deletes the PLMN in the EFfplmn on the USIM. 
7.1.3.1 Method of test 

7.1.3.3.1 Initial conditions 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 234/005/0001 
Access control: unrestricted. 



The default UICC is used with the following exception: 
EFppLMN (Forbidden PLMNs) 



Logically 


: PLMNl 
PLMN2 
PLMN3 
PLMN4 


empty 
empty 
empty 
empty 
























PLMNS 


234 005 (MCC MNC) 




















PLMN6 


empty 






















Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 
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Hex 


FF 

B13 
32 


FF 

B14 
04 


FF 

B15 
50 


FF 

B16 
FF 


FF 

B17 
FF 


FF 
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FF 


FF 


FF 


FF 


FF 


FF 


FF 



The UICC is installed into the Terminal and the UE is set to manual PLMN selection mode. 

7.1.3.3.2 Procedure 

a) The UE is powered on. 

b) PLMN with MCC/MNC of 234/005 is manually selected. 

c) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

d) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 234/005 
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TMSI: "12345678" 

to the UE. 

e) After receipt of TMSI REALLOCATION COMPLETE from the UE, the USS sends CHANNEL RELEASE. 

f) The UE is soft powered down. 

7.1.3.2 Acceptance criteria 

1) After step c) the UE shall send LOCATION UPDATE REQUEST to the USS. 

2) After step d) the UE shall respond with TMSI REALLOCATION COMPLETE. 

3) After step f) the USIM shall contain the following values: 
EFloci (Location Information) 



Logically: LAI-MCC 


234 


















LAl-MNC 


: 005 


















TMSI: 


"12345678" 
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XX 


00 



EFfplmn (Forbidden PLMNs) 



Logically 


: PLMNl 
PLMN2 
PLMN3 
PLMN4 
PLMN5 
PLMN6 


empty 
empty 
empty 
empty 
empty 
empty 
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FF 


FF 


FF 


FF 


FF 


FF 



7.2 User controlled PLMN selector handling 
7.2.1 UE updating the User controlled PLMN selector list 
7.2.1 .1 Definition and applicability 



The User controlled PLMN selector list gives in priority order the preferred UPLMNs on which the UE shall register. 
The Radio Access Technology identifier defines the Radio network in which the UE shall register. The list is stored on 
the USIM in the EFplmnwact- Update and deletion of PLMNs may be performed by the subscriber. 

This test applies to Terminals accessing UTRAN. 

7.2.1.2 Conformance requirement 

The UE shall correctly replace the selected UPLMN in the User controlled PLMN selector list. 
TS 31.102, subclause 5.3.6. 
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7.2.1.3 Test purpose 

To verify that the UE correctly updates the EFplmnwact 

7.2.1.4 Method of test 

7.2.1.4.1 Initial conditions 

No USS is required for this test. 

The default UICC is used. 

The UICC is installed into the Terminal and the UE is powered on. 

7.2.1.4.2 Procedure 

a) The user shall initiate an MMI dependent procedure to change the second UPLMN in the User controlled PLMN 
selector Ust to MCC/MNC of 567/002, the ACT identifier shall set to UTRAN only. 

b) The UE is soft powered down. 

7.2.1 .5 Acceptance criteria 

After step b) the USIM shall contain the following values: 
EFpLMNwACT (UPLMN Selector) 
Logically: V PLMN:244 081 (MCC MNC) 



r'ACT: 


UTRAN 


2"'^ PLMN: 


567 002 


2"" ACT 


UTRAN 


3'" PLMN: 


244 082 


3'" ACT 


UTRAN 


4"^ PLMN: 


244 082 


4"^ ACT 


GSM 


5"^ PLMN: 


244 003 


5* ACT 


UTRAN 


6* PLMN: 


244 004 


6* ACT 


UTRAN 


7* PLMN: 


244 005 


7"^ ACT 


UTRAN 


8"^ PLMN: 


244 006 


8* ACT 


UTRAN 


9* PLMN: 


244 007 


9"^ ACT 


UTRAN 


10*^ PLMN: 


244 008 


10* ACT 


UTRAN 


11* PLMN: 


244 009 


11* ACT 


UTRAN 


12* PLMN: 


244 010 


12* ACT 


UTRAN 
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Coding: 
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00 
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B46 
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B55 


B56 


B57 


B58 


B59 


B60 




42 


04 


80 


80 
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00 
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7.2.2 UE recognising tine priority order of tine User controlled PLMN selector 
list with the same access technology. 

7.2.2.1 Definition and applicability 

The User controlled PLMN selector list gives in priority order the preferred UPLMNs on which the UE shall register. 
The Radio Access Technology identifier defines the Radio network in which the UE shall register. The list is stored on 
the USIM in the EFplmnwact- Update and deletion of UPLMNs may be performed by the subscriber by the use of the 
PIN. 

This test applies to Terminals accessing UTRAN. 

7.2.2.2 Conformance requirement 

When registering onto a VPLMN the UE shall take into account the priority order of the UPLMNs in the preferred list 
on the USIM. 

TS 22.011, subclause 3.2.2. 

7.2.2.3 Test purpose 

To verify that the UPLMN with the higher priority (defined by its position in EFplmnwact) takes precedence over the 
UPLMN with the lower priority when the UE performs a network selection. 

7.2.2.4 Method of test 
7.2.2.4.1 Initial conditions 

The USS transmits on two BCCHs, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/033/0001 
Access control: unrestricted. 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/034/0001 
Access control: unrestricted. 

The default UICC is used with the following exception: 
EFpLMNwACT (UPLMN Selector with Access Technology) 
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Logically: l" PLMN:244 081 (MCC MNC) 
r'ACT: UTRAN 



T"^ PLMN: 


244 081 


T"^ ACT 


GSM 


3"* PLMN: 


244 082 


3"" ACT 


UTRAN 


3"* PLMN: 


244 082 


3"^ ACT 


GSM 



10*^ PLMN: 244 008 

10* ACT UTRAN 

11* PLMN: 244 034 

11* ACT UTRAN 

12* PLMN: 244 033 

12* ACT UTRAN 

Coding: Bl B2 B3 B4 B5 B6 B7 B8 B9 BIO Bll B12 B13 B14 B15 
Hex 42 04 18 80 00 42 04 18 00 80 42 04 28 80 00 

B16 B17 B18 B19 B20 

42 04 28 00 80 



B46 B47 B48 B49 B50 B51 B52 B53 B54 B55 B56 B57 B58 B59 B60 
42 04 80 80 00 42 04 43 80 00 42 04 33 80 00 
The UICC is installed into the Terminal and the UE is set to automatic PLMN selection mode. 

7.2.2.4.2 Procedure 

a) The UE is powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 244/034 
TMSI: "34567890" 

to the UE 

d) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the USS sends CHANNEL RELEASE to 
theUE. 

e) The UE is soft powered down. 

7.2.2.5 Acceptance criteria 

1) After step b) the UE shall send LOCATION UPDATE REQUEST containing an MCC/MNC of 234/034 to the 
USS. 

2) After step c) the UE shall respond with TMSI REALLOCATION COMPLETE. 

3) After step e) the USIM shall contain the following values: 

EFloci (Location Information) 

Logically: LAI-MCC: 244 
LAI-MNC: 034 
TMSI: "34567890" 
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Coding: Bl B2 B3 B4 B5 B6 B7 B8 B9 BIO Bll 

Hex 34 56 78 90 42 04 43 xx xx xx 00 



7.2.3 UE recognising tine priority order of tine User controlled PLMN selector 
list using a ACT preference. 

7.2.3.1 Definition and applicability 

The User controlled PLMN selector list gives in priority order the preferred UPLMNs on which the UE shall register. 
The Radio Access Technology identifier defines the Radio network in which the UE shall register. The list is stored on 
the USIM in the EFplmnwact- Update and deletion of UPLMNs may be performed by the subscriber by the use of the 
PIN. 

This test applies to a GSM/UMTS dual mode UE accessing both UTRAN and GSM using either ID-1 or Plug-in UICC 

7.2.3.2 Conformance requirement 

When registering onto a VPLMN the UE shall take into account the priority of the ACT identifier in the preferred list 
on the USIM. After the successful registration the Registered PLMN, the last used ACcess Technology field 
EFrplmnact shall be updated 

TS 22.011, subclause 3.2.2 and TS 31.102, subclause 4.2.5, subclause 5.1.2 

7.2.3.2.1 Test purpose 

To verify that the ACT with the higher priority (defined by its position in EFplmnwact) takes precedence over the 
UPLMN with the lower priority when the UE performs a network selection and that the EFrplmnact is correct updated. 

7.2.3.3 Method of test 
7.2.3.3.1 Initial conditions 

For this test both a GSM SS and a UTRAN USS is needed. 

The GSM SS transmit on BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/081/0001 
Access control: unrestricted. 

The UMTS USS transmit on BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/082/0001 
Access control: unrestricted. 

The default UICC is used with the following exception: 

EFrplmnact (Registered PLMN last used ACcess Technology) 
Logically: Last registered ACT set to UTRAN 

Coding: Bl B2 

Hex 80 00 
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The UICC is installed into the Terminal and the UE is set to automatic PLMN selection mode. 

7.2.3.3.2 Procedure 

a) The UE is powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the SS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the SS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 244/081 
TMSI: "34567890" 

to the UE 

d) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the SS sends CHANNEL RELEASE to 
theUE. 

e) The UE is soft powered down. 

7.2.3.4 Acceptance criteria 

1) After step b) the UE shall send LOCATION UPDATE REQUEST containing an MCC/MNC of 244/081 to the 
SS. 

2) After step c) the UE shall respond with TMSI REALLOCATION COMPLETE. 

3) After step e) the USIM shall contain the following values: 
EFloci (Location Information) 



Logically: LAI-MCC 


: 244 


















LAI-MNC 


: 081 


















TMSI: 


"34567890" 
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EFrplmnact (Registered PLMN last used ACcess Technology) 
Logically: Last registered ACT set to GSM 

Coding: Bl B2 

Hex 00 80 



7.2.4 UE recognising the priority order of the User controlled PLMN selector 
list using a ACT preference; accessing UTRAN 

7.2.4.1 Definition and applicability 

The User controlled PLMN selector list gives in priority order the preferred UPLMNs on which the UE shall register. 
The Radio Access Technology identifier defines the Radio network in which the UE shall register. The list is stored on 
the USIM in the EFplmnwact- Update and deletion of UPLMNs may be performed by the subscriber by the use of the 
PIN. 

This test applies to Terminals accessing UTRAN. This test does not apply, if the previous test is performed. 
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7.2.4.2 Conformance requirement 

When registering onto a VPLMN the UE shall take into account the priority of the ACT identifier in the preferred list 
on the USIM. After the successful registration the Registered PLMN, the last used ACcess Technology field 
EFrplmnact shall be updated 

TS 22.011, subclause 3.2.2 and TS 31.102, subclause 4.2.5, subclause 5.1.2 

7.2.4.2.1 Test purpose 

To verify that the ACT with the higher priority (defined by its position in EFplmnwact) takes precedence over the 
UPLMN with the lower priority when the UE performs a network selection and that the EFrplmnact is correct updated. 

7.2.4.3 Method of test 

7.2.4.3.1 Initial conditions 

The USS transmits on two BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/082/0001 
Access control: unrestricted. 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/003/0001 
Access control: unrestricted. 

The default UICC is used with the following exception: 
EFrplmnact (Registered PLMN last used ACcess Technology) 
Logically: Last registered ACT shall be set to GSM 

Coding: Bl B2 

Hex 00 80 

The UICCC is installed into the Terminal and the UE is set to automatic PLMN selection mode. 

7.2.4.3.2 Procedure 

a) The UE is powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the SS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the SS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 244/082 
TMSI: "34567890" 

to the UE 

d) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the SS sends CHANNEL RELEASE to 
the UE. 

e) The UE is soft powered down. 
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7.2.4.4 Acceptance criteria 

1) After step b) the UE shall send LOCATION UPDATE REQUEST containing an MCC/MNC of 244/08 1 to the 
SS. 

2) After step c) the UE shall respond with TMSI REALLOCATION COMPLETE. 

3) After step e) the USIM shall contain the following values: 
EFloci (Location Information) 



Logically: LAI-MCC 


: 244 


















LAI-MNC 


: 082 


















TMSI: 


"34567890" 
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EFrplmnact (Registered PLMN last used ACcess Technology) 
Logically: Last registered ACT shall be set to UTRAN 

Coding: Bl B2 

Hex 80 00 

7.3 Operator controlled PLMN selector handling 

7.3.1 UE recognising the priority order of the Operator controlled PLMN 
selector list. 

7.3.1 .1 Definition and applicability 

The Operator controlled PLMN selector list gives in priority order the preferred OPLMNs on which the UE shall 
register if no network of the User controlled PLMN selector list is available. The Radio Access Technology identifier 
defines the Radio network in which the UE shall register. The list is stored on the USIM in the EFoplmnwact- Update 
and deletion of OPLMNs shall not be possible by the subscriber by the use of the PIN. 

This test applies to Terminals accessing UTRAN. 

7.3.1.2 Conformance requirement 

When registering onto a VPLMN the UE shall take into account the priority of OPLMNs in the preferred list on the 
USIM. 

TS 22.011, subclause 3.2.2 and TS 31.102, subclause 4.2.53 

7.3.1.3 Test purpose 

To verify that the OPLMN with the higher priority (defined by its position in EFoplmnwact) takes precedence over the 
OPLMN with the lower priority when the UE performs a network selection. 

7.3.1.4 Method of test 
7.3.1.4.1 Initial conditions 

For this test a USS is needed. 
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The USS transmits on two BCCHs, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 254/011/0001 
Access control; unrestricted. 



Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/012/0001 
Access control: unrestricted. 



The default UICC is used with the following exception: 
EFoPLMNwACT (OPLMN Selector) 



Logically: r PLMN:254 012 (MCC MNC) 














r'ACT UTRAN 














2"''PLMN: 254 011 














2"'^ ACT UTRAN 
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The UICC is installed into the Terminal and the UE is set to automatic PLMN selection mode. 

7.3.1.4.2 Procedure 

a) The UE is powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 254/012 
TMSl: "34567890" 

to the UE 

d) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the USS sends CHANNEL RELEASE to 
theUE. 

e) The UE is soft powered down. 

7.3.1 .5 Acceptance criteria 

1) After step b) the UE shall send LOCATION UPDATE REQUEST containing an MCC/MNC of 254/012 to the 
USS. 

2) After step c) the UE shall respond with TMSI REALLOCATION COMPLETE. 

3) After step e) the USIM shall contain the following values: 

EFloci (Location Information) 

Logically: LAI-MCC: 254 
LAI-MNC: 012 
TMSI: "34567890" 
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7.3.2 UE recognising tine priority order of tine User controlled PLMN selector 
over the Operator controlled PLMN selector list. 

7.3.2.1 Definition and applicability 

The User controlled PLMN selector list has a higher priority as the OPLMN selector list on which the UE shall 
register. The Radio Access Technology identifier defines the Radio network in which the UE shall register. The list is 
stored on the USIM in the EFplmnwact- 

This test applies to Terminals accessing UTRAN. 

7.3.2.2 Conformance requirement 

When registering onto a VPLMN the UE shall take into account the priority of UPLMNs first before the OPLMNs in 
the preferred hst on the USIM. 

TS 22.011, subclause 3.2.2.2 and TS 31.102, subclause 4.2.5, 4.2.53 

7.3.2.3 Test purpose 

To verify that the UPLMN with a lower priority (defined by its position in EFoplmnwact) takes precedence over the 
OPLMN with a higher priority when the UE performs a network selection. 

7.3.2.4 Method of test 

7.3.2.4.1 Initial conditions 

For this test a USS is needed. 

The USS transmits on two BCCHs, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 254/001/0001 
Access control: unrestricted. 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/010/0001 
Access control: unrestricted. 

The default UICC is used. 

The UICC is installed into the Terminal and the UE is set to automatic PLMN selection mode. 

7.3.2.4.2 Procedure 

a) The UE is powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 244/010 
TMSI: "34567890" 

to the UE 
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d) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the USS sends CHANNEL RELEASE to 
theUE. 

e) The UE is soft powered down. 

7.3.2.5 Acceptance criteria 

1) After step b) the UE shall send LOCATION UPDATE REQUEST containing an MCC/MNC of 244/010 to the 
USS. 

2) After step c) the UE shall respond with TMSI REALLOCATION COMPLETE. 

3) After step e) the USIM shall contain the following values: 
EFloci (Location Information) 



Logically: LAI-MCC: 


: 244 


















LAI-MNC 


: 010 


















TMSI: 


"34567890" 
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7.4 HPLMN search handling 

7.4.1 UE recognising tine searcin periocJ of tine HPLIVIN 

7.4.1 .1 Definition and applicability 

The HPLMN list gives in priority order the Home PLMN on which the UE shall register first.. The HPLMN search 
period gives the time interval in which the UE shall search for a possible HPLMN registration. 

This test applies to Terminals accessing UTRAN. 

7.4.1.2 Conformance requirement 

After registered onto a VPLMN the UE shall take into account the HPLMN search period timer and the priority order of 
the HPLMNs in the preferred list on the USIM. 

TS 22.011, subclause 3.2.2. and 3.2.2.5 

7.4.1.3 Test purpose 

To verify that the HPLMN timer is read and the HPLMN takes precedence over the VPLMN in which the UE is 
currently registered in. 

7.4.1.4 Method of test 
7.4.1.4.1 Initial conditions 

For this test a UTRAN USS is needed. 

The USS transmits on BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/081/0001 
Access control: unrestricted. 
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After the registration of UE the USS transmits on a second BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control; unrestricted. 

The default UICC shall be used with the following exception: 

EFhplmn (HPLMN Search period) 

Logically: set to 6minutes 
Coding: Bl 
Hex 01 

The UICC shall be installed into the Terminal and the UE shall be set to automatic PLMN selection mode. 
7.4.1.4.2 Procedure 

a) The UE shall be powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the USS shall send IMMEDIATE ASSIGNMENT to the 
UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 244/081 
TMSI: "34567890" 

to the UE 

d) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the USS sends CHANNEL RELEASE to 
theUE. 

e) The USS starts to send on the second BCCH with the MCC/MNC 246/081. An internal timer shall start to run. 

f) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 
The internal timer is stopped. 

g) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 246/081 
TMSI: "12345678" 

to the UE. 

h) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the USS sends CHANNEL RELEASE to 
the UE. 

i) The UE is soft powered down. 
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7.4.1 .5 Acceptance criteria 

1) After step e) the UE shall send LOCATION UPDATE REQUEST containing an MCC/MNC of 246/08 1 to the 
USS. 

2) After step g) the UE shall respond with TMSI REALLOCATION COMPLETE. 

3) The value of the internal timer shall not exceed 6 minutes. 

Note: To take the systems processing time into account, the value of the internal timer may allowed to be a 
guard time of 1 second greater than the required 6 seconds. 

4) After step i) the USIM shall contain the following values: 

EFloci (Location Information) 

Logically: LAI-MCC: 246 
LAI-MNC: 081 
TMSI: "12345678" 
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7.4.2 GSM/UMTS dual mocJe UEs recognising the search periocJ of the 
HPLMN 

7.4.2.1 Definition and applicability 

The HPLMN list gives in priority order the Home PLMN on which the UE shall register first. The Radio Access 
Technology identifier defines the Radio network in which the UE shall register. The list is stored on the USIM in the 
EFhplmnact- The HPLMN search period gives the time interval in which the UE shall search for a possible HPLMN 
registration. To avoid a duplication of a test, 

This test applies to a GSM/UMTS dual mode UE accessing both UTRAN and GSM using either ID-1 or Plug-in UICC. 

To avoid a duplication of tests, this test supersede the previous test case (7.4.1). 

7.4.2.2 Conformance requirement 

After registered onto a VPLMN the UE shall take into account the HPLMN search period timer and the priority order of 
the HPLMNs in the preferred list on the USIM including the Access Technology Identifier. 

TS 22.011, subclause 3.2.2. and 3.2.2.5 

7.4.2.3 Test purpose 

To verify that the HPLMN timer is read and the HPLMN with the higher priority (defined by its position in 
EFhplmnact) takes precedence over the VPLMN in which the UE is currently registered in. 

7.4.2.4 Method of test 
7.4.2.4.1 Initial conditions 

For this test both a GSM SS and a UTRAN USS is needed. 

The GSM SS transmits on BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/081/0001 
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Access control: unrestricted. 

After the registration of UE the GSM SS transmits on a second BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

At the same time as the SS sends on a second BCCH, the UMTS USS transmit on BCCH, with the following network 
parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

The default UICC is used with the following exception: 
EFhplmnact (HPLMN selector with Access Technology) 
Logically: Set to UTRAN 

Coding: Bl B2 
Hex 80 00 

EFhplmn (HPLMN Search period) 

Logically: set to 6minutes 
Coding: Bl 
Hex 01 

The UICC is installed into the Terminal and the UE is set to automatic PLMN selection mode. 

7.4.2.4.2 Procedure 

a) The UE is powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the SS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the SS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 244/081 
TMSI: "34567890" 

to the UE 

d) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the SS sends CHANNEL RELEASE to 
theUE. 

e) The SS starts to send on the second BCCH with the MCC/MNC 246/081 and the USS starts to send with the 
Same MCC/MNC. An internal timer shall start to run. 

f) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 
The internal timer is stopped. 

g) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 246/081 
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TMSI: "12345678" 

to the UE 

h) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the USS sends CHANNEL RELEASE to 
theUE. 

i) The UE is soft powered down. 

7.4.2.5 Acceptance criteria 

1) After step e) the UE shall send LOCATION UPDATE REQUEST containing an MCC/MNC of 246/081 to the 
USS. 

2) After step g) the UE shall respond with TMSI REALLOCATION COMPLETE. 

3) The value of the internal timer shall not exceed 6 minutes. 

Note: To take the systems processing time into account, the value of the internal timer may allowed to be a 
guard time of 1 second greater than the required 6 seconds. 

4) After step i) the USIM shall contain the following values: 
EFloci (Location Information) 



Logically: LAI-MCC: 


: 246 


















LAI-MNC 


: 081 


















TMSI: 


"12345678" 
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7.5 RPLMNACT handling 

7.5.1 UE recognising tine last registered ACT 

7.5.1 .1 Definition and applicability 

The RPLMNACT identifies the last Access Technology in which the UE was registered. Together with the 
identification of the last registered PLMN. This two lists shall be used for the network selection in the case the UE is 
within coverage (at switch-on) or returns to coverage of the PLMN on which it is already registered (as indicated by the 
registered PLMN stored in the USIM), the UE shall perform a location update to a new location area if necessary. 

Note: According to 22.01 1 subclause 3.2.2.2, the last registered network take precedence even over the 
HPLMN. 

This test applies to a GSM/UMTS dual mode UE accessing both UTRAN and GSM using either ID-1 or Plug-in UICC. 

7.5.1.2 Conformance requirement 

1) Recognising the network, in which the UE was last registered. 

2) Recognising the Access Technology, in which the UE has last used. 

3) AT the time of power on, from all available network the above network and Access Technology shall be first 
selected. 

TS 22.011, subclause 3.2.2. and 3.2.2.2; TS 31.102, subclause 5.1.1. 
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7.5.1.3 Test purpose 

To verify that the last registered network together with the last used Access technology takes precedence over all other 
available network. 

7.5.1.4 Method of test 
7.5.1.4.1 Initial conditions 

For this test both a GSM SS and an UTRAN USS is needed. 

The USS transmits on two BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 242/001/0001 
Access control: unrestricted. 

The GSM SS transmits on the BCCH with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 242/001/0001 
Access control: unrestricted. 

The default UlCC shall be used with the following exception: 
EFloci (Location Information) 



Logically: LAl-MCC: 


242 
















LAl-MNC: 


001 
















LAI-LAC: 


9999 
















TMSI: 


"12345678" 
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EFrplmnact (Registered PLMN Access Technology) 

Logically: set to GSM 

Coding: Bl B2 
Hex 00 80 

The UICC shall be installed into the Terminal and the UE shall be set to automatic PLMN selection mode. 
7.5.1.4.2 Procedure 

a) The UE shall be powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the SS shall send IMMEDIATE ASSIGNMENT to the 
UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the SS sends LOCATION UPDATE 
ACCEPT with: 
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LAI (MCC/MNC): 242/001 
LAC: 0001 

TMSI: "34567890" 

to the UE 

d) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the SS sends CHANNEL RELEASE to 
the UE. 

e) The UE is soft powered down. 



7.5.1.5 Acceptance criteria 

After step e) the USIM shall contain the following values: 
EFloci (Location Information) 



Logically 


: LAI-MCC: 
LAI-MNC 
LAI-LAC: 
TMSI: 


: 242 
: 001 

0001 
"34567890" 
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7.5.2 GSM/UMTS dual mode UEs recognising the search period of the 
HPLMN 

7.5.2.1 Definition and applicability 

The HPLMN list gives in priority order the Home PLMN on which the UE shall register first. The Radio Access 
Technology identifier defines the Radio network in which the UE shall register. The list is stored on the USIM in the 
EFhplmnact- The HPLMN search period gives the time interval in which the UE shall search for a possible HPLMN 
registration. To avoid a duplication of a test, 

This test applies to a GSM/UMTS dual mode UE accessing both UTRAN and GSM using either ID-1 or Plug-in UICC. 

To avoid a duplication of tests, this test supersede the previous test case (7.4.1). 

7.5.2.2 Conformance requirement 

After registered onto a VPLMN the UE shall take into account the HPLMN search period timer and the priority order of 
the HPLMNs in the preferred list on the USIM including the Access Technology Identifier. 

TS 22.011, subclause 3.2.2. and 3.2.2.5 

7.5.2.3 Test purpose 

To verify that the HPLMN timer is read and the HPLMN with the higher priority (defined by its position in 
EFhplmnact) takes precedence over the VPLMN in which the UE is currently registered in. 

7.5.2.4 Method of test 
7.5.2.4.1 Initial conditions 

For this test both a GSM SS and a UTRAN USS is needed. 

The GSM SS transmits on BCCH, with the following network parameters: 
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Attach/detach: disabled 

LAI (MCC/MNC/LAC): 244/081/0001 
Access control: unrestricted. 

After the registration of UE the GSM SS transmits on a second BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

At the same time as the SS sends on a second BCCH, the UMTS USS transmit on BCCH, with the following network 
parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

The default UICC is used with the following exception: 
EFhplmnact (HPLMN selector with Access Technology) 
Logically: Set to UTRAN 

Coding: Bl B2 
Hex 80 00 

EFhplmn (HPLMN Search period) 

Logically: set to 6minutes 
Coding: Bl 
Hex 01 

The UICC is installed into the Terminal and the UE is set to automatic PLMN selection mode. 

7.5.2.4.2 Procedure 

a) The UE is powered on. 

b) After receipt of a CHANNEL REQUEST from the UE, the SS sends IMMEDIATE ASSIGNMENT to the UE. 

c) After receipt of a LOCATION UPDATE REQUEST from the UE, the SS sends LOCATION UPDATE 
ACCEPT with: 

LAI (MCC/MNC): 244/081 
TMSI: "34567890" 

to the UE 

d) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the SS sends CHANNEL RELEASE to 
the UE. 

e) The SS starts to send on the second BCCH with the MCC/MNC 246/081 and the USS starts to send with the 
Same MCC/MNC. An internal timer shall start to run. 

f) After receipt of a CHANNEL REQUEST from the UE, the USS sends IMMEDIATE ASSIGNMENT to the UE. 
The internal timer is stopped. 

g) After receipt of a LOCATION UPDATE REQUEST from the UE, the USS sends LOCATION UPDATE 
ACCEPT with: 



£75/ 



3GPP TS 31.121 version 3.0.0 Release 1 999 86 ETSI TS 1 31 1 21 V3.0.0 (2000-1 2) 



LAI (MCC/MNC): 246/081 
TMSI: "12345678" 

to the UE 

h) After receipt of a TMSI REALLOCATION COMPLETE from the UE, the USS sends CHANNEL RELEASE to 
theUE. 

i) The UE is soft powered down. 

7.5.2.5 Acceptance criteria 

1) After step e) the UE shall send LOCATION UPDATE REQUEST containing an MCC/MNC of 246/081 to the 
USS. 

2) After step g) the UE shall respond with TMSI REALLOCATION COMPLETE. 

3) The value of the internal timer shall not exceed 6 minutes. 

Note: To take the systems processing time into account, the value of the internal timer may allowed to be a 
guard time of 1 second greater than the required 6 seconds. 

4) After step i) the USIM shall contain the following values: 
EFloci (Location Information) 



Logically: LAI-MCC: 246 


















LAl-MNC: 081 


















TMSI: "12345678" 


















Coding: Bl B2 B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


Hex 12 34 56 


78 


42 


06 


18 


XX 


XX 


XX 


00 



8 Subscription independent tests 

8.1 Phone book procedures 

8.1 .1 Recognition of a previously changed phonebook 

8.1 .1 .1 Definition and applicability 

If the UICC is inserted into a GSM terminal, the phonebook my have been altered in this GSM session. If the ADN 
entry has been changed or deleted, the GSM terminal will not be able to change the appropriate additional phonebook 
entries (e.g. EFanr Additional Number). In that case the UICC shall set a flag in the appropriate EFpBc (phonebook 
Control). If the UICC is inserted in a 3G Terminal later, the 3G Terminal shall recognise the flag and the phonebook 
shall be synchronised by the Terminal. Once the Terminal recognise the set flag in the EFpBc, the Terminal shall update 
the Change Counter in the EFcc. 

This test applies to all 3G Terminal using either ID-1 UICC or Plug -In UICC. 

8.1.1.2 Conformance requirement 

The 3G Terminal shall recognise the set flag in the EFpBc and then synchronise the phonebook. The Terminal shall also 
update EFcc (Change Counter). 

TS 31.121, subclause 4.4.2 
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8.1.1.3 Test purpose 

1) To verify that the 3G Terminal has recognised that the phonebook has been altered by a GSM Terminal. 

2) To verify that the 3G Terminal does the synchronising of the changed phonebook entries. 

3) To verify that the 3G Terminal updates the EFpBc and EFcc- 

8.1.1.4 Method of test 
8.1 .1 .4.1 Initial conditions 

No USS is needed for this test. 

The default UICC is used with the following exception: 

EFadn (Abbreviated Dialling Number) 

Logically: 
Record 1: 

Length of alpha identifier: 32 characters; 

Alpha identifier: "ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEF"; 

Length of BCD number: "03"; 

TON and NPI: Telephony and Unknown; 

Dialled number: 123; 

CCI: None; 

Extl: None. 



Record 1: 


























Coding: 


Bl 


B2 


B3 


B32 


B33 


B34 


B35 


B36 


B37 


B38 


B39 ... 


B46 


Hex 


41 


42 


43 


46 


03 


81 


21 


F3 


FF 


FF 


FF 


FF 



EFpBc (Phonebook Control) 

Logically: 
Record 1: 

The ADN Record No. 1 has been hanged by a GSM terminal. 

Related ADN record is not hidden. 

Coding: Bl B2 
Hex 01 00 

EFcc (Change Counter) 
Logically: "OOOF" 

Coding: Bl B2 
Hex 00 OF 

The UICC is installed into the Terminal 

8.1.1.4.2 Procedure 

a) The 3G Terminal is powered on. 

b) The Terminal shall stay powered on until the phonebook synchronisation procedures are finished. If the 
synchronisation is indicated by the Terminal, the Terminal shall only powered down after this indication is 
vanished. 
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8.1 .1 .5 Acceptance criteria 

1) After step b) the USIM shall contain the following values: 
EFpBc (Phonebook Control) 



Logically: 
Record 1: 



The entry control information is reset. 
Related ADN record is not hidden. 



Coding: Bl B2 
Hex 00 00 



EFcc (Change Counter) 

Logically: The counter is incremented to "0010" 



Coding: Bl 
Hex 00 



B2 
10 



8.1 .2 Update of the Phonebook Synchronisation Counter (PSC) 

8.1.2.1 Definition and applicability 

The phonebook synchronisation Counter is used to unambiguously identify the status of the phonebook. Every time the 
phonebook is reset/deleted or the UID and/or the CC has run out of range, the PSC hall be regenerated. 

The PSC is a part of the phonebook identifier. 

This test applies to all 3G Terminal using either ID-1 UICC or Plug-in UICC. 

8.1.2.2 Conformance requirement 

Every time either the UID or the CC is incremented by the Terminal, the value of the contend of the appropriate EF 
shall be tested. If either UID or CC has reached "FF FF", the related EF shall be set to "00 01" and the PSC is 
incremented. 

TS 31.102, subclause 4.4.2.12.2 

8.1.2.3 Test purpose 

1) To verify that the 3G Terminal has recognised that the values of UID and CC has changed. 

2) To verify that the 3G Terminal reset the maximal value of EFum and EFcc back to "00 01". 

3) To verify that the 3G Terminal updates EFpsc- 

8.1.2.4 Method of test 
8.1.2.4.1 Initial conditions 

No USS is needed for this test. 

The default UICC is used with the following exception: 

EFuiD (Unique Identifier) 

Logically: one record is set to "FF FF" 
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Coding: Bl B2 
Hex FF FF 



EFpuiD (Previous Unique Identifier) 
Logically: is set to "FF FF" 



Coding: 


Bl 


B2 


Hex 


FF 


FF 


EFcc (Change Counter) 


Logically: 


set to 


"FF FF" 


Coding: 


Bl 


B2 


Hex 


FF 


FF 



EFpsc (Phonebook Synchronisation Counter) 
Logically: set to "00 00 FF FF" 



Coding: 


Bl 


B2 


B3 


B4 


Hex 


00 


00 


FF 


FF 



At least one phonebook entry shall be empty and available for creating a new entry (e.g. an appropriate ADN record). 
The UICC is installed into the Terminal and the UE is powered on and the correct PIN is entered. 

8.1.2.4.2 Procedure 

a) A new phonebook entry shall be created. 

Note: This may be done by storing a new telephone number in an empty ADN record. 

b) The UE shall have given the time to perform the regeneration of the UID records. 

Note: It is assumed that the UE will indicate the time it needs to perform the regeneration by displaying a busy 
signal to the use. 

8.1 .2.5 Acceptance criteria 

1) After step b) the USIM shall contain the following values: 

The EFuiD (Unique Identifier) shall have been regenerated. The value FF FF shall have been replaced by an appropriate 
value which shall be distinguishable to the maximum value (e.g. by having only 1 1 ADN records). 

Logically: set to "xx xx" 

Coding: Bl B2 
Hex XX XX 

Note: "xx xx" may have any value except "FF FF". 

EFpuiD (Previous Unique Identifier) 
Logically: set to "00 01" 
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Coding: Bl B2 
Hex 00 01 



EFcc (Change Counter) 
Logically: set to "00 01" 

Coding: Bl B2 
Hex 00 01 



EFpsc (Phonebook Synchronisation Counter) 
Logically: set to "00 01 00 00" 



Coding: 


Bl 


B2 


B3 


B4 


Hex 


00 


01 


00 


00 



8.2 Short message handling report 

8.2.1 Correct storage of a SMS on the USIM 

8.2.1 .1 Definition and applicability 

Once a SMS is received by the UE, the Terminal shall store the SMS on the USIM, if this is indicated by the class 2 of 
the SMS (USIM specific SMS). For this it is assumed, that at least one relevant SMS field are available on the USIM 
and they are indicated as empty. If all SMS data field are full, this shall be indicated in the SMS Status filed. 

This test applies to all 3G Terminal accessing UTRAN and supporting "receive SMS" functionality. 

8.2.1.2 Conformance requirement 

The received class 2 SMS shall be stored on the USIM in EFsms- The status of a received SMS, which has not been read 
yet, shall be set to "3" (SMS to be read). After the last empty SMS field is filled with a received SMS, the memory full 
flag shall be set in the EFsmss- 

TS 23.038, clause 4. 

TS 24.040 [13] 

TS 31.102, subclause 4.2.25 and 4.2.28 

8.2.1.3 Test purpose 

1) To verify that the 3G Terminal stored correctly the class 2 SMS on the USIM. 

2) To verify that the 3G Terminal sets the status of a received, and not yet read SMS to "3" (SMS to be read). 

3) To verify that the 3G Terminal sets the memory full flag in EFsmss- 

8.2.1.4 Method of test 
8.2.1.4.1 Initial conditions 

The default UICC is used with the following exception: 
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EFusT (USIM Service Table) 

Logically: 

Local Phone Book available 

User controlled PLMN selector available 

Fixed dialling numbers available 

Barred dialling numbers available 

The GSM Access available 

The Group Identifier level 1 and level 2 not available 

SMS available 

SMS Status available 



Coding: 


Bl 


B2 


B3 


B4 


binary 


xlxxxxll 


xllxxxxx 


xxxx 1x00 


xxxx xlxx 



The coding of EFust shall conform with the capabilities of the USIM used. 
EFsMs (Short Message Service) 
At least 10 records. 

Record 1 shall be empty. 
Logically: Status byte set to empty. 



Record 1: 


























Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


Hex 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 



B176 
FF 



All other Record shall be full. 
Logically: Status byte set to SMS read. 

The text body of the record shall be filled with any appropriate text. 



Records 




























Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 ... 


B176 


Hex 


01 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 



Note: "xx" shall be the appropriate text using the SMS default 7-bit coded alphabet as defined in 3G TS 23.038 
which represents the received SMS. 

EFsMss (SMS Status) 

Logically: Last used TP-MR not defined. 

Memory capacity available (flag unset bl="l"). 

Coding: Bl B2 

Hex FF FF 

The USS transmits on the BCCH, with the following network parameters: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC): 246/081/0001 
Access control: unrestricted. 

User Equipment: 

The UE is in MM-state "idle, updated". 
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Record 1: 


























Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


Hex 


03 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 
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8.2.1.4.2 Procedure 

a) After the UE is set to idle mode, a defined SMS with 160 characters shall be send to the UE. 

b) After the UE has indicated that a SMS was received, the SMS shall not be read. The UE is powered off. 

8.2.1 .5 Acceptance criteria 

1) After step b) the record of the EFsms which was empty, shall contain the following values: 

Logically: Status byte set to SMS to be read 

The text of the received SMS shall be present in the record. 

B176 

XX 

Note: "xx" shall be the appropriate text using the SMS default 7-bit coded alphabet as defined in 3G TS 23.038 
which represents the received SMS. 

2) After step b) the memory flag in the EFsmss shall be set to full. 

EFsMss (SMS Status) 

Logically: Last used TP-MR shall be set to any appropriate value. 
Memory capacity available (flag set bl="0"). 

Coding: Bl B2 

Hex FE XX 



8.2.2 Correct reading of a SMS on the USIM 

8.2.2.1 Definition and applicability 

A SMS which is stored but not yet read, is indicated as Status "3" (SMS to be read ) on EFsms- The Terminal may 
indicate the user this status. After the SMS is read by the user, the status of the SMS shall be changed to "1" (SMS 
read). 

This test applies to all 3G Terminal accessing UTRAN and supporting "receive SMS" functionality. 

8.2.2.2 Conformance requirement 

A received shall be stored on the USIM in EFsms- At the time the SMS is read by the user, the status of a received SMS, 
shall be changed to "1" (SMS read). 

TS 23.038, clause 4. 

TS 23.040 [13] 

TS 31.102, subclause 4.2.25 and subclause 4.2.28. 

8.2.2.3 Test purpose 

1) To verify that the 3G Terminal read correctly the SMS on the USIM. 

2) To verify that the 3G Terminal changes the status of a read SMS to "1" (SMS read). 
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8.2.2.4 Method of test 
8.2.2.4.1 Initial conditions 

The default UICC is used with the following exception: 

EFusT (USIM Service Table) 

Logically: 

Local Phone Book available 

User controlled PLMN selector available 

Fixed dialling numbers available 

Barred dialling numbers available 

The GSM Access available 

The Group Identifier level 1 and level 2 not available 

SMS available 

SMS Status available 



Coding: 


Bl 


B2 


B3 


B4 


binary 


xlxxxxll 


xllxxxxx 


xxxx 1x00 


xxxx xlxx 



The coding of EFust shall conform with the capabilities of the USIM used. 

EFsMss (SMS Status) 

Logically: Last used TP-MR not set. 

Memory capacity available (flag unset bl="l"). 

Coding: Bl B2 

Hex FF FF 

EFsMs (Short Message Service) 

Logically: Status byte set to SMS to be read. 

A chosen test is written in the text body of the EFsms- 
Record 1: 

Coding: Bl B2 B3 B4 B5 B6 B7 

Hex 03 XX XX xx xx xx xx 

Note: "xx" shall be the appropriate text using the SMS default 7-bit coded alphabet as defined in 3G TS 23.038 
which represents the stored SMS. 

At least 9 records. 

Logically: Status byte set to empty 

no text is written (Remainder Bytes set to "00"). 



B8 


B9 


BIO 


Bll 


B12 ... 


B176 


XX 


XX 


XX 


XX 


XX 


XX 



Record: 




























Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 ... 


B176 


Hex 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


00 


FF 



A USS is only needed to bring the UE into a defined idle mode. The USS transmit on the BCCH: 

Attach/detach: disabled 

LAI (MCC/MNC/LAC):246/081/0001 

Access control: unrestricted. 



User Equipment: 

The UE is in MM-state "idle, updated". 
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8.2.2.4.2 Procedure 

a) After the UE has brought in idle state, the SMS shall be read. 

b) The UE is powered off. 

8.2.2.5 Acceptance criteria 

1) After a) the correct text of the SMS shall be read from the UE display. 

2) After step b) the EFsms record 1 shall contains the following values: 

Logically: Status byte set to SMS read. 

the text of the SMS shall be unchanged. 

B176 

XX 

Note: "xx" shall be the appropriate text using the SMS default 7-bit coded alphabet as defined in 3G TS 23.038 
which represents the stored SMS. 



Record 1: 


























Coding: 


Bl 


B2 


B3 


B4 


B5 


B6 


B7 


B8 


B9 


BIO 


Bll 


B12 


Hex 


01 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 


XX 



£75/ 



3GPP TS 31.121 version 3.0.0 Release 1999 



95 



ETSI TS 131 121 V3.0.0 (2000-12) 



Annex A (informative): 
Change history 



The table below indicates all change requests that have been incorporated into the present document since it was 
initially approved by 3GPP TSG-T. 
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CR 
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2.0.0 


3.0.0 
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